create-warlock 5.3.1 → 5.4.0

package/CHANGELOG.md

@@ -4,6 +4,39 @@ All notable changes to `create-warlock` are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). `@warlock.js/*` packages are released in lockstep — every package shares the same version number, so a version below may list only the changes that affected this package.
 
+## 5.3.2 - 2026-09-05
+
+### Fixed
+
+- `npm create warlock` could not complete on a clean machine. The starter's `prepare` script ran husky, which needs a git repository, and the scaffolder installs before it runs `git init` — so the install failed and the scaffolder aborted with an empty `node_modules`, with and without `--no-git`.
+- The first `pnpm install` in a fresh project failed with `ERR_PNPM_IGNORED_BUILDS`. pnpm writes `pnpm-workspace.yaml` with a literal `esbuild: set this to true or false` placeholder when it meets an ignored build script non-interactively, and then rejects that value on the next install. The template now ships a decided value, so pnpm never writes the placeholder.
+- A scaffolded app failed its own ESLint check on the first `warlock dev`. The `web` feature injected its connector import at the TOP of `warlock.config.ts`, ahead of the imports the template already had, and the generated app formats with `prettier-plugin-organize-imports` — so the injected line was out of order the moment it was written. It is now inserted in sorted position.
+- Running the scaffolder without a terminal — from CI, a script, or any non-interactive shell — died with `TTY initialization failed: uv_tty_init returned EBADF`, a libuv internal shown to a developer whose only mistake was not being at a keyboard. A missing terminal is no longer an error when the flags already answer every prompt; only a genuinely unanswerable question stops the run, and it names `--yes` and the flags that supply it.
+
+### Removed
+
+- husky and its `prepare` script from the starter. Note what goes with it: the generated project ships no CI, so the format, lint, typecheck and test that ran on commit are gone with nothing yet replacing them. That gap is tracked separately.
+
+## 5.3.1 - 2026-09-04
+
+### Fixed
+
+- `npm create warlock@5.3.1` resolves and runs. The 5.3.0 scaffolder could not install, because the family's reciprocal exact peer requirements were unsatisfiable from a fresh registry install.
+
+## 5.3.0 - 2026-09-03
+
+### Added
+
+- A browser gate for the freshly scaffolded starter, so the generated project is exercised in a real browser rather than assumed to work.
+
+### Changed
+
+- The web starter template migrated to the current page contract, with a pinned home route identity so SSR and hydration agree on one route name.
+
+### Fixed
+
+- The scaffolder no longer parses CSS as TypeScript.
+
 ## 5.2.3 - 2026-09-02
 
 ### Fixed

package/esm/commands/create-new-app/index.mjs

@@ -3,6 +3,7 @@ import { getAiPackageOptions, getAiProviderOptions, getAllFeatureKeys, getDefaul
 import { ALLOWED_PACKAGE_MANAGERS, detectPackageManagers, getPackageManager, getPreferredPackageManager, getSystemPackageManagers, isValidPackageManager, setPackageManager } from "../../helpers/package-manager.mjs";
 import { packageRoot } from "../../helpers/paths.mjs";
 import { App } from "../../helpers/app.mjs";
+import { hasInteractiveStdin } from "../../helpers/tty.mjs";
 import { showIntroBanner } from "../../ui/banner.mjs";
 import { createWarlockApp } from "../create-warlock-app/index.mjs";
 import getAppPath from "./get-app-path.mjs";
@@ -21,7 +22,7 @@ async function createNewApp(cli = {}) {
 		cancel("Node.js version must be at least 20.0.0");
 		process.exit(0);
 	}
-	if (cli.yes) {
+	if (cli.yes || !hasInteractiveStdin()) {
 		await createNonInteractive(cli);
 		return;
 	}
@@ -149,7 +150,7 @@ function resolveNonInteractiveOptions(cli) {
 async function createNonInteractive(cli) {
 	const appName = (cli.name ?? "").trim();
 	if (!appName) {
-		cancel("--yes requires a project name (first argument or --name=<name>)");
+		cancel("A project name is required and no terminal is available to ask for one. Pass it as the first argument or --name=<name>. Non-interactive flags: --yes, --pm=<npm|yarn|pnpm>, --db=<driver>|--no-db, --features=<list>, --ai=<list>, --git|--no-git, --jwt|--no-jwt.");
 		process.exit(1);
 	}
 	const appPath = getAppPath(appName);

package/esm/commands/create-new-app/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../create-warlock/src/commands/create-new-app/index.ts"],"sourcesContent":["import {\r\n  cancel,\r\n  confirm,\r\n  isCancel,\r\n  multiselect,\r\n  select,\r\n  text,\r\n} from \"@clack/prompts\";\r\nimport { colors } from \"@mongez/copper\";\r\nimport { getJsonFile } from \"@warlock.js/fs\";\r\nimport {\r\n  getDatabaseDriver,\r\n  getDatabaseDriverOptions,\r\n  isNoDatabase,\r\n} from \"../../features/database-drivers\";\r\nimport {\r\n  getAiPackageOptions,\r\n  getAiProviderOptions,\r\n  getAllFeatureKeys,\r\n  getDefaultFeatureKeys,\r\n  getFeatureOptions,\r\n} from \"../../features/features-map\";\r\nimport { App } from \"../../helpers/app\";\r\nimport {\r\n  ALLOWED_PACKAGE_MANAGERS,\r\n  detectPackageManagers,\r\n  getPackageManager,\r\n  getPreferredPackageManager,\r\n  getSystemPackageManagers,\r\n  isValidPackageManager,\r\n  setPackageManager,\r\n} from \"../../helpers/package-manager\";\r\nimport { packageRoot } from \"../../helpers/paths\";\r\nimport { showIntroBanner } from \"../../ui/banner\";\r\nimport { createWarlockApp } from \"../create-warlock-app\";\r\nimport getAppPath from \"./get-app-path\";\r\nimport { AppOptions, App as AppType, CliFlags } from \"./types\";\r\n\r\nexport default async function createNewApp(cli: CliFlags = {}) {\r\n  // Start detecting package managers in the background to avoid delay later\r\n  const pmDetectionPromise = detectPackageManagers();\r\n\r\n  // Get version from package.json\r\n  const packageJson: any = getJsonFile(packageRoot(\"package.json\"));\r\n  const createWarlockVersion = packageJson.version;\r\n\r\n  // Show the intro banner\r\n  showIntroBanner(createWarlockVersion);\r\n\r\n  console.log(colors.cyan(\"Let's create something magical! \\n\"));\r\n\r\n  // Validate Node.js version (minimum v20)\r\n  const [major] = process.versions.node.split(\".\").map(Number);\r\n  if (major < 20) {\r\n    cancel(\"Node.js version must be at least 20.0.0\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Non-interactive path: build everything from flags and skip the prompts.\r\n  if (cli.yes) {\r\n    await createNonInteractive(cli);\r\n    return;\r\n  }\r\n\r\n  // Step 1: Project name\r\n  const appName = await text({\r\n    message: \"What shall we call your project?\",\r\n    placeholder: \"my-warlock-app\",\r\n  });\r\n\r\n  if (isCancel(appName) || !appName.trim()) {\r\n    cancel(\"A project name is required to continue\");\r\n    process.exit(0);\r\n  }\r\n\r\n  const appPath = getAppPath(appName);\r\n  if (!appPath) return;\r\n\r\n  // Step 2: Package Manager selection\r\n  await pmDetectionPromise; // Ensure detection is complete\r\n\r\n  const packageManager = await select({\r\n    message: \"Which package manager do you want to use?\",\r\n    options: getSystemPackageManagers().map(pm => ({\r\n      value: pm,\r\n      label: pm,\r\n    })),\r\n    initialValue: getPreferredPackageManager(),\r\n  });\r\n\r\n  if (isCancel(packageManager)) {\r\n    cancel(\"Package manager selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  setPackageManager(packageManager as string);\r\n\r\n  // Step 3: Database driver selection\r\n  const databaseDriver = await select({\r\n    message: \"Choose your database driver\",\r\n    options: getDatabaseDriverOptions(),\r\n  });\r\n\r\n  if (isCancel(databaseDriver)) {\r\n    cancel(\"Database selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  const selectedDriver = getDatabaseDriver(databaseDriver as string);\r\n\r\n  // Step 4: Features selection\r\n  const selectedFeatures = await multiselect({\r\n    message: \"Select optional features to include\",\r\n    options: getFeatureOptions(),\r\n    initialValues: getDefaultFeatureKeys(),\r\n    required: false,\r\n  });\r\n\r\n  if (isCancel(selectedFeatures)) {\r\n    cancel(\"Feature selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 4b: AI providers + capability packages — selecting any pulls\r\n  // @warlock.js/ai automatically. The result still flows through the\r\n  // `selectedAiProviders` → `aiProviders` pipeline, which now also carries the\r\n  // capability packages (ai-tools / ai-panoptic / ai-workspace).\r\n  const selectedAiProviders = await multiselect({\r\n    message:\r\n      \"Add AI packages? Providers + capabilities — the core AI package is included automatically\",\r\n    options: [...getAiProviderOptions(), ...getAiPackageOptions()],\r\n    required: false,\r\n  });\r\n\r\n  if (isCancel(selectedAiProviders)) {\r\n    cancel(\"AI provider selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 5: Git initialization\r\n  const useGit =\r\n    (await confirm({\r\n      message: \"Initialize a Git repository?\",\r\n    })) === true;\r\n\r\n  if (isCancel(useGit)) {\r\n    cancel(\"Setup cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 6: JWT secret generation\r\n  const useJWT =\r\n    (await confirm({\r\n      message: \"Generate JWT secret keys?\",\r\n    })) === true;\r\n\r\n  if (isCancel(useJWT)) {\r\n    cancel(\"Setup cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Build app details\r\n  const appDetails: Required<AppType> = {\r\n    appName: appName,\r\n    appType: \"warlock\",\r\n    appPath: appPath,\r\n    pkgManager: getPackageManager(),\r\n    options: {\r\n      databaseDriver: databaseDriver as string,\r\n      databasePort: selectedDriver?.defaultPort || 27017,\r\n      features: selectedFeatures as string[],\r\n      aiProviders: selectedAiProviders as string[],\r\n      useGit,\r\n      useJWT,\r\n    },\r\n  };\r\n\r\n  // Create the app\r\n  await scaffold(appDetails);\r\n}\r\n\r\n/**\r\n * Run the scaffold and make the process's exit code tell the truth: anything\r\n * the user asked for that did not happen leaves the shell with a non-zero\r\n * status, so scripts and CI cannot mistake a half-built project for a finished\r\n * one. The problems themselves are printed by the scaffolder.\r\n */\r\nasync function scaffold(appDetails: Required<AppType>) {\r\n  const outcome = await createWarlockApp(new App(appDetails));\r\n\r\n  if (outcome && !outcome.ok) {\r\n    process.exitCode = 1;\r\n  }\r\n}\r\n\r\n/**\r\n * Resolve the full set of `AppOptions` from parsed CLI flags — applying the\r\n * non-interactive defaults, validating the database driver and feature/provider\r\n * keys, and handling the `none` (no database) selection.\r\n *\r\n * Pure and side-effect free (no prompts, no `process.exit`) so the flag → app\r\n * mapping is unit-testable. Throws on an unknown driver or feature key so the\r\n * caller can fail fast before any file is written.\r\n */\r\nexport function resolveNonInteractiveOptions(cli: CliFlags): AppOptions {\r\n  const databaseDriver = cli.db ?? \"mongodb\";\r\n  const noDatabase = isNoDatabase(databaseDriver);\r\n  const driver = noDatabase ? undefined : getDatabaseDriver(databaseDriver);\r\n\r\n  if (!noDatabase && !driver) {\r\n    throw new Error(`Unknown database driver \"${databaseDriver}\"`);\r\n  }\r\n\r\n  const features = cli.features ?? [];\r\n  const aiProviders = cli.ai ?? [];\r\n\r\n  const allowedKeys = getAllFeatureKeys();\r\n  const invalidKeys = [...features, ...aiProviders].filter(\r\n    key => !allowedKeys.includes(key),\r\n  );\r\n\r\n  if (invalidKeys.length > 0) {\r\n    throw new Error(`Unknown feature(s): ${invalidKeys.join(\",\")}`);\r\n  }\r\n\r\n  return {\r\n    databaseDriver,\r\n    databasePort: driver?.defaultPort ?? 27017,\r\n    features,\r\n    aiProviders,\r\n    useGit: cli.git ?? false,\r\n    useJWT: cli.jwt ?? false,\r\n  };\r\n}\r\n\r\n/**\r\n * Non-interactive scaffold path for `--yes`. Builds the app from flags with\r\n * sensible defaults and skips every prompt — a single command scaffolds the\r\n * entire app. Validation lives in `resolveNonInteractiveOptions`; a typo fails\r\n * fast here instead of mid-install.\r\n */\r\nasync function createNonInteractive(cli: CliFlags) {\r\n  const appName = (cli.name ?? \"\").trim();\r\n\r\n  if (!appName) {\r\n    cancel(\"--yes requires a project name (first argument or --name=<name>)\");\r\n    process.exit(1);\r\n  }\r\n\r\n  const appPath = getAppPath(appName);\r\n\r\n  if (!appPath) return;\r\n\r\n  await detectPackageManagers();\r\n\r\n  const packageManager = cli.pm ?? getPreferredPackageManager();\r\n\r\n  if (!isValidPackageManager(packageManager)) {\r\n    cancel(\r\n      `Unknown package manager \"${packageManager}\" — expected one of: ${ALLOWED_PACKAGE_MANAGERS.join(\", \")}`,\r\n    );\r\n    process.exit(1);\r\n  }\r\n\r\n  setPackageManager(packageManager);\r\n\r\n  let options: AppOptions;\r\n\r\n  try {\r\n    options = resolveNonInteractiveOptions(cli);\r\n  } catch (error) {\r\n    cancel((error as Error).message);\r\n    process.exit(1);\r\n  }\r\n\r\n  const appDetails: Required<AppType> = {\r\n    appName,\r\n    appType: \"warlock\",\r\n    appPath,\r\n    pkgManager: getPackageManager(),\r\n    options,\r\n  };\r\n\r\n  await scaffold(appDetails);\r\n}\r\n"],"mappings":";;;;;;;;;;;;;AAsCA,eAA8B,aAAa,MAAgB,CAAC,GAAG;CAE7D,MAAM,qBAAqB,sBAAsB;CAIjD,MAAM,uBADmB,YAAY,YAAY,cAAc,CACxB,CAAC,CAAC;CAGzC,gBAAgB,oBAAoB;CAEpC,QAAQ,IAAI,OAAO,KAAK,oCAAoC,CAAC;CAG7D,MAAM,CAAC,SAAS,QAAQ,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;CAC3D,IAAI,QAAQ,IAAI;EACd,OAAO,yCAAyC;EAChD,QAAQ,KAAK,CAAC;CAChB;CAGA,IAAI,IAAI,KAAK;EACX,MAAM,qBAAqB,GAAG;EAC9B;CACF;CAGA,MAAM,UAAU,MAAM,KAAK;EACzB,SAAS;EACT,aAAa;CACf,CAAC;CAED,IAAI,SAAS,OAAO,KAAK,CAAC,QAAQ,KAAK,GAAG;EACxC,OAAO,wCAAwC;EAC/C,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,UAAU,WAAW,OAAO;CAClC,IAAI,CAAC,SAAS;CAGd,MAAM;CAEN,MAAM,iBAAiB,MAAM,OAAO;EAClC,SAAS;EACT,SAAS,yBAAyB,CAAC,CAAC,KAAI,QAAO;GAC7C,OAAO;GACP,OAAO;EACT,EAAE;EACF,cAAc,2BAA2B;CAC3C,CAAC;CAED,IAAI,SAAS,cAAc,GAAG;EAC5B,OAAO,qCAAqC;EAC5C,QAAQ,KAAK,CAAC;CAChB;CAEA,kBAAkB,cAAwB;CAG1C,MAAM,iBAAiB,MAAM,OAAO;EAClC,SAAS;EACT,SAAS,yBAAyB;CACpC,CAAC;CAED,IAAI,SAAS,cAAc,GAAG;EAC5B,OAAO,8BAA8B;EACrC,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,iBAAiB,kBAAkB,cAAwB;CAGjE,MAAM,mBAAmB,MAAM,YAAY;EACzC,SAAS;EACT,SAAS,kBAAkB;EAC3B,eAAe,sBAAsB;EACrC,UAAU;CACZ,CAAC;CAED,IAAI,SAAS,gBAAgB,GAAG;EAC9B,OAAO,6BAA6B;EACpC,QAAQ,KAAK,CAAC;CAChB;CAMA,MAAM,sBAAsB,MAAM,YAAY;EAC5C,SACE;EACF,SAAS,CAAC,GAAG,qBAAqB,GAAG,GAAG,oBAAoB,CAAC;EAC7D,UAAU;CACZ,CAAC;CAED,IAAI,SAAS,mBAAmB,GAAG;EACjC,OAAO,iCAAiC;EACxC,QAAQ,KAAK,CAAC;CAChB;CAGA,MAAM,SACH,MAAM,QAAQ,EACb,SAAS,+BACX,CAAC,MAAO;CAEV,IAAI,SAAS,MAAM,GAAG;EACpB,OAAO,iBAAiB;EACxB,QAAQ,KAAK,CAAC;CAChB;CAGA,MAAM,SACH,MAAM,QAAQ,EACb,SAAS,4BACX,CAAC,MAAO;CAEV,IAAI,SAAS,MAAM,GAAG;EACpB,OAAO,iBAAiB;EACxB,QAAQ,KAAK,CAAC;CAChB;CAmBA,MAAM,SAAS;EAfJ;EACT,SAAS;EACA;EACT,YAAY,kBAAkB;EAC9B,SAAS;GACS;GAChB,cAAc,gBAAgB,eAAe;GAC7C,UAAU;GACV,aAAa;GACb;GACA;EACF;CAIsB,CAAC;AAC3B;;;;;;;AAQA,eAAe,SAAS,YAA+B;CACrD,MAAM,UAAU,MAAM,iBAAiB,IAAI,IAAI,UAAU,CAAC;CAE1D,IAAI,WAAW,CAAC,QAAQ,IACtB,QAAQ,WAAW;AAEvB;;;;;;;;;;AAWA,SAAgB,6BAA6B,KAA2B;CACtE,MAAM,iBAAiB,IAAI,MAAM;CACjC,MAAM,aAAa,aAAa,cAAc;CAC9C,MAAM,SAAS,aAAa,SAAY,kBAAkB,cAAc;CAExE,IAAI,CAAC,cAAc,CAAC,QAClB,MAAM,IAAI,MAAM,4BAA4B,eAAe,EAAE;CAG/D,MAAM,WAAW,IAAI,YAAY,CAAC;CAClC,MAAM,cAAc,IAAI,MAAM,CAAC;CAE/B,MAAM,cAAc,kBAAkB;CACtC,MAAM,cAAc,CAAC,GAAG,UAAU,GAAG,WAAW,CAAC,CAAC,QAChD,QAAO,CAAC,YAAY,SAAS,GAAG,CAClC;CAEA,IAAI,YAAY,SAAS,GACvB,MAAM,IAAI,MAAM,uBAAuB,YAAY,KAAK,GAAG,GAAG;CAGhE,OAAO;EACL;EACA,cAAc,QAAQ,eAAe;EACrC;EACA;EACA,QAAQ,IAAI,OAAO;EACnB,QAAQ,IAAI,OAAO;CACrB;AACF;;;;;;;AAQA,eAAe,qBAAqB,KAAe;CACjD,MAAM,WAAW,IAAI,QAAQ,GAAE,CAAE,KAAK;CAEtC,IAAI,CAAC,SAAS;EACZ,OAAO,iEAAiE;EACxE,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,UAAU,WAAW,OAAO;CAElC,IAAI,CAAC,SAAS;CAEd,MAAM,sBAAsB;CAE5B,MAAM,iBAAiB,IAAI,MAAM,2BAA2B;CAE5D,IAAI,CAAC,sBAAsB,cAAc,GAAG;EAC1C,OACE,4BAA4B,eAAe,uBAAuB,yBAAyB,KAAK,IAAI,GACtG;EACA,QAAQ,KAAK,CAAC;CAChB;CAEA,kBAAkB,cAAc;CAEhC,IAAI;CAEJ,IAAI;EACF,UAAU,6BAA6B,GAAG;CAC5C,SAAS,OAAO;EACd,OAAQ,MAAgB,OAAO;EAC/B,QAAQ,KAAK,CAAC;CAChB;CAUA,MAAM,SAAS;EAPb;EACA,SAAS;EACT;EACA,YAAY,kBAAkB;EAC9B;CAGsB,CAAC;AAC3B"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../create-warlock/src/commands/create-new-app/index.ts"],"sourcesContent":["import {\r\n  cancel,\r\n  confirm,\r\n  isCancel,\r\n  multiselect,\r\n  select,\r\n  text,\r\n} from \"@clack/prompts\";\r\nimport { colors } from \"@mongez/copper\";\r\nimport { getJsonFile } from \"@warlock.js/fs\";\r\nimport {\r\n  getDatabaseDriver,\r\n  getDatabaseDriverOptions,\r\n  isNoDatabase,\r\n} from \"../../features/database-drivers\";\r\nimport {\r\n  getAiPackageOptions,\r\n  getAiProviderOptions,\r\n  getAllFeatureKeys,\r\n  getDefaultFeatureKeys,\r\n  getFeatureOptions,\r\n} from \"../../features/features-map\";\r\nimport { App } from \"../../helpers/app\";\r\nimport {\r\n  ALLOWED_PACKAGE_MANAGERS,\r\n  detectPackageManagers,\r\n  getPackageManager,\r\n  getPreferredPackageManager,\r\n  getSystemPackageManagers,\r\n  isValidPackageManager,\r\n  setPackageManager,\r\n} from \"../../helpers/package-manager\";\r\nimport { packageRoot } from \"../../helpers/paths\";\r\nimport { hasInteractiveStdin } from \"../../helpers/tty\";\r\nimport { showIntroBanner } from \"../../ui/banner\";\r\nimport { createWarlockApp } from \"../create-warlock-app\";\r\nimport getAppPath from \"./get-app-path\";\r\nimport { AppOptions, App as AppType, CliFlags } from \"./types\";\r\n\r\nexport default async function createNewApp(cli: CliFlags = {}) {\r\n  // Start detecting package managers in the background to avoid delay later\r\n  const pmDetectionPromise = detectPackageManagers();\r\n\r\n  // Get version from package.json\r\n  const packageJson: any = getJsonFile(packageRoot(\"package.json\"));\r\n  const createWarlockVersion = packageJson.version;\r\n\r\n  // Show the intro banner\r\n  showIntroBanner(createWarlockVersion);\r\n\r\n  console.log(colors.cyan(\"Let's create something magical! \\n\"));\r\n\r\n  // Validate Node.js version (minimum v20)\r\n  const [major] = process.versions.node.split(\".\").map(Number);\r\n  if (major < 20) {\r\n    cancel(\"Node.js version must be at least 20.0.0\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Non-interactive path: build everything from flags and skip the prompts.\r\n  //\r\n  // Triggered by --yes, OR automatically the moment stdin has no TTY — CI, a\r\n  // script, an agent harness. This check MUST run before the first prompt\r\n  // call: attempting `text()`/`select()` on a non-TTY stdin does not fail\r\n  // cleanly, it crashes with a libuv internal (\"TTY initialization failed:\r\n  // uv_tty_init returned EBADF\") before any app directory exists, no matter\r\n  // how the run was invoked.\r\n  //\r\n  // Prompting is the fallback, not the precondition: a project name is the\r\n  // only answer with no sane default, so when a name is already available\r\n  // (positional arg or --name) the run proceeds exactly as --yes would, TTY\r\n  // or not. When the name is ALSO missing and there is no TTY to ask for one,\r\n  // createNonInteractive fails loudly — naming --yes and every non-interactive\r\n  // flag — instead of ever reaching a prompt. Every other prompt already has a\r\n  // default; see resolveNonInteractiveOptions below for the full table.\r\n  if (cli.yes || !hasInteractiveStdin()) {\r\n    await createNonInteractive(cli);\r\n    return;\r\n  }\r\n\r\n  // Step 1: Project name\r\n  const appName = await text({\r\n    message: \"What shall we call your project?\",\r\n    placeholder: \"my-warlock-app\",\r\n  });\r\n\r\n  if (isCancel(appName) || !appName.trim()) {\r\n    cancel(\"A project name is required to continue\");\r\n    process.exit(0);\r\n  }\r\n\r\n  const appPath = getAppPath(appName);\r\n  if (!appPath) return;\r\n\r\n  // Step 2: Package Manager selection\r\n  await pmDetectionPromise; // Ensure detection is complete\r\n\r\n  const packageManager = await select({\r\n    message: \"Which package manager do you want to use?\",\r\n    options: getSystemPackageManagers().map(pm => ({\r\n      value: pm,\r\n      label: pm,\r\n    })),\r\n    initialValue: getPreferredPackageManager(),\r\n  });\r\n\r\n  if (isCancel(packageManager)) {\r\n    cancel(\"Package manager selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  setPackageManager(packageManager as string);\r\n\r\n  // Step 3: Database driver selection\r\n  const databaseDriver = await select({\r\n    message: \"Choose your database driver\",\r\n    options: getDatabaseDriverOptions(),\r\n  });\r\n\r\n  if (isCancel(databaseDriver)) {\r\n    cancel(\"Database selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  const selectedDriver = getDatabaseDriver(databaseDriver as string);\r\n\r\n  // Step 4: Features selection\r\n  const selectedFeatures = await multiselect({\r\n    message: \"Select optional features to include\",\r\n    options: getFeatureOptions(),\r\n    initialValues: getDefaultFeatureKeys(),\r\n    required: false,\r\n  });\r\n\r\n  if (isCancel(selectedFeatures)) {\r\n    cancel(\"Feature selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 4b: AI providers + capability packages — selecting any pulls\r\n  // @warlock.js/ai automatically. The result still flows through the\r\n  // `selectedAiProviders` → `aiProviders` pipeline, which now also carries the\r\n  // capability packages (ai-tools / ai-panoptic / ai-workspace).\r\n  const selectedAiProviders = await multiselect({\r\n    message:\r\n      \"Add AI packages? Providers + capabilities — the core AI package is included automatically\",\r\n    options: [...getAiProviderOptions(), ...getAiPackageOptions()],\r\n    required: false,\r\n  });\r\n\r\n  if (isCancel(selectedAiProviders)) {\r\n    cancel(\"AI provider selection cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 5: Git initialization\r\n  const useGit =\r\n    (await confirm({\r\n      message: \"Initialize a Git repository?\",\r\n    })) === true;\r\n\r\n  if (isCancel(useGit)) {\r\n    cancel(\"Setup cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Step 6: JWT secret generation\r\n  const useJWT =\r\n    (await confirm({\r\n      message: \"Generate JWT secret keys?\",\r\n    })) === true;\r\n\r\n  if (isCancel(useJWT)) {\r\n    cancel(\"Setup cancelled\");\r\n    process.exit(0);\r\n  }\r\n\r\n  // Build app details\r\n  const appDetails: Required<AppType> = {\r\n    appName: appName,\r\n    appType: \"warlock\",\r\n    appPath: appPath,\r\n    pkgManager: getPackageManager(),\r\n    options: {\r\n      databaseDriver: databaseDriver as string,\r\n      databasePort: selectedDriver?.defaultPort || 27017,\r\n      features: selectedFeatures as string[],\r\n      aiProviders: selectedAiProviders as string[],\r\n      useGit,\r\n      useJWT,\r\n    },\r\n  };\r\n\r\n  // Create the app\r\n  await scaffold(appDetails);\r\n}\r\n\r\n/**\r\n * Run the scaffold and make the process's exit code tell the truth: anything\r\n * the user asked for that did not happen leaves the shell with a non-zero\r\n * status, so scripts and CI cannot mistake a half-built project for a finished\r\n * one. The problems themselves are printed by the scaffolder.\r\n */\r\nasync function scaffold(appDetails: Required<AppType>) {\r\n  const outcome = await createWarlockApp(new App(appDetails));\r\n\r\n  if (outcome && !outcome.ok) {\r\n    process.exitCode = 1;\r\n  }\r\n}\r\n\r\n/**\r\n * Resolve the full set of `AppOptions` from parsed CLI flags — applying the\r\n * non-interactive defaults, validating the database driver and feature/provider\r\n * keys, and handling the `none` (no database) selection.\r\n *\r\n * Pure and side-effect free (no prompts, no `process.exit`) so the flag → app\r\n * mapping is unit-testable. Throws on an unknown driver or feature key so the\r\n * caller can fail fast before any file is written.\r\n */\r\nexport function resolveNonInteractiveOptions(cli: CliFlags): AppOptions {\r\n  const databaseDriver = cli.db ?? \"mongodb\";\r\n  const noDatabase = isNoDatabase(databaseDriver);\r\n  const driver = noDatabase ? undefined : getDatabaseDriver(databaseDriver);\r\n\r\n  if (!noDatabase && !driver) {\r\n    throw new Error(`Unknown database driver \"${databaseDriver}\"`);\r\n  }\r\n\r\n  const features = cli.features ?? [];\r\n  const aiProviders = cli.ai ?? [];\r\n\r\n  const allowedKeys = getAllFeatureKeys();\r\n  const invalidKeys = [...features, ...aiProviders].filter(\r\n    key => !allowedKeys.includes(key),\r\n  );\r\n\r\n  if (invalidKeys.length > 0) {\r\n    throw new Error(`Unknown feature(s): ${invalidKeys.join(\",\")}`);\r\n  }\r\n\r\n  return {\r\n    databaseDriver,\r\n    databasePort: driver?.defaultPort ?? 27017,\r\n    features,\r\n    aiProviders,\r\n    useGit: cli.git ?? false,\r\n    useJWT: cli.jwt ?? false,\r\n  };\r\n}\r\n\r\n/**\r\n * Non-interactive scaffold path for `--yes`. Builds the app from flags with\r\n * sensible defaults and skips every prompt — a single command scaffolds the\r\n * entire app. Validation lives in `resolveNonInteractiveOptions`; a typo fails\r\n * fast here instead of mid-install.\r\n */\r\nasync function createNonInteractive(cli: CliFlags) {\r\n  const appName = (cli.name ?? \"\").trim();\r\n\r\n  if (!appName) {\r\n    // Reached either because --yes was passed with no name, or because stdin\r\n    // has no TTY to prompt for one — either way, nothing is left to fall back\r\n    // to. Name --yes AND every non-interactive flag so a CI log is enough to\r\n    // fix the invocation without hunting for docs.\r\n    cancel(\r\n      \"A project name is required and no terminal is available to ask for one. \" +\r\n        \"Pass it as the first argument or --name=<name>. Non-interactive flags: \" +\r\n        \"--yes, --pm=<npm|yarn|pnpm>, --db=<driver>|--no-db, --features=<list>, \" +\r\n        \"--ai=<list>, --git|--no-git, --jwt|--no-jwt.\",\r\n    );\r\n    process.exit(1);\r\n  }\r\n\r\n  const appPath = getAppPath(appName);\r\n\r\n  if (!appPath) return;\r\n\r\n  await detectPackageManagers();\r\n\r\n  const packageManager = cli.pm ?? getPreferredPackageManager();\r\n\r\n  if (!isValidPackageManager(packageManager)) {\r\n    cancel(\r\n      `Unknown package manager \"${packageManager}\" — expected one of: ${ALLOWED_PACKAGE_MANAGERS.join(\", \")}`,\r\n    );\r\n    process.exit(1);\r\n  }\r\n\r\n  setPackageManager(packageManager);\r\n\r\n  let options: AppOptions;\r\n\r\n  try {\r\n    options = resolveNonInteractiveOptions(cli);\r\n  } catch (error) {\r\n    cancel((error as Error).message);\r\n    process.exit(1);\r\n  }\r\n\r\n  const appDetails: Required<AppType> = {\r\n    appName,\r\n    appType: \"warlock\",\r\n    appPath,\r\n    pkgManager: getPackageManager(),\r\n    options,\r\n  };\r\n\r\n  await scaffold(appDetails);\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;AAuCA,eAA8B,aAAa,MAAgB,CAAC,GAAG;CAE7D,MAAM,qBAAqB,sBAAsB;CAIjD,MAAM,uBADmB,YAAY,YAAY,cAAc,CACxB,CAAC,CAAC;CAGzC,gBAAgB,oBAAoB;CAEpC,QAAQ,IAAI,OAAO,KAAK,oCAAoC,CAAC;CAG7D,MAAM,CAAC,SAAS,QAAQ,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;CAC3D,IAAI,QAAQ,IAAI;EACd,OAAO,yCAAyC;EAChD,QAAQ,KAAK,CAAC;CAChB;CAkBA,IAAI,IAAI,OAAO,CAAC,oBAAoB,GAAG;EACrC,MAAM,qBAAqB,GAAG;EAC9B;CACF;CAGA,MAAM,UAAU,MAAM,KAAK;EACzB,SAAS;EACT,aAAa;CACf,CAAC;CAED,IAAI,SAAS,OAAO,KAAK,CAAC,QAAQ,KAAK,GAAG;EACxC,OAAO,wCAAwC;EAC/C,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,UAAU,WAAW,OAAO;CAClC,IAAI,CAAC,SAAS;CAGd,MAAM;CAEN,MAAM,iBAAiB,MAAM,OAAO;EAClC,SAAS;EACT,SAAS,yBAAyB,CAAC,CAAC,KAAI,QAAO;GAC7C,OAAO;GACP,OAAO;EACT,EAAE;EACF,cAAc,2BAA2B;CAC3C,CAAC;CAED,IAAI,SAAS,cAAc,GAAG;EAC5B,OAAO,qCAAqC;EAC5C,QAAQ,KAAK,CAAC;CAChB;CAEA,kBAAkB,cAAwB;CAG1C,MAAM,iBAAiB,MAAM,OAAO;EAClC,SAAS;EACT,SAAS,yBAAyB;CACpC,CAAC;CAED,IAAI,SAAS,cAAc,GAAG;EAC5B,OAAO,8BAA8B;EACrC,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,iBAAiB,kBAAkB,cAAwB;CAGjE,MAAM,mBAAmB,MAAM,YAAY;EACzC,SAAS;EACT,SAAS,kBAAkB;EAC3B,eAAe,sBAAsB;EACrC,UAAU;CACZ,CAAC;CAED,IAAI,SAAS,gBAAgB,GAAG;EAC9B,OAAO,6BAA6B;EACpC,QAAQ,KAAK,CAAC;CAChB;CAMA,MAAM,sBAAsB,MAAM,YAAY;EAC5C,SACE;EACF,SAAS,CAAC,GAAG,qBAAqB,GAAG,GAAG,oBAAoB,CAAC;EAC7D,UAAU;CACZ,CAAC;CAED,IAAI,SAAS,mBAAmB,GAAG;EACjC,OAAO,iCAAiC;EACxC,QAAQ,KAAK,CAAC;CAChB;CAGA,MAAM,SACH,MAAM,QAAQ,EACb,SAAS,+BACX,CAAC,MAAO;CAEV,IAAI,SAAS,MAAM,GAAG;EACpB,OAAO,iBAAiB;EACxB,QAAQ,KAAK,CAAC;CAChB;CAGA,MAAM,SACH,MAAM,QAAQ,EACb,SAAS,4BACX,CAAC,MAAO;CAEV,IAAI,SAAS,MAAM,GAAG;EACpB,OAAO,iBAAiB;EACxB,QAAQ,KAAK,CAAC;CAChB;CAmBA,MAAM,SAAS;EAfJ;EACT,SAAS;EACA;EACT,YAAY,kBAAkB;EAC9B,SAAS;GACS;GAChB,cAAc,gBAAgB,eAAe;GAC7C,UAAU;GACV,aAAa;GACb;GACA;EACF;CAIsB,CAAC;AAC3B;;;;;;;AAQA,eAAe,SAAS,YAA+B;CACrD,MAAM,UAAU,MAAM,iBAAiB,IAAI,IAAI,UAAU,CAAC;CAE1D,IAAI,WAAW,CAAC,QAAQ,IACtB,QAAQ,WAAW;AAEvB;;;;;;;;;;AAWA,SAAgB,6BAA6B,KAA2B;CACtE,MAAM,iBAAiB,IAAI,MAAM;CACjC,MAAM,aAAa,aAAa,cAAc;CAC9C,MAAM,SAAS,aAAa,SAAY,kBAAkB,cAAc;CAExE,IAAI,CAAC,cAAc,CAAC,QAClB,MAAM,IAAI,MAAM,4BAA4B,eAAe,EAAE;CAG/D,MAAM,WAAW,IAAI,YAAY,CAAC;CAClC,MAAM,cAAc,IAAI,MAAM,CAAC;CAE/B,MAAM,cAAc,kBAAkB;CACtC,MAAM,cAAc,CAAC,GAAG,UAAU,GAAG,WAAW,CAAC,CAAC,QAChD,QAAO,CAAC,YAAY,SAAS,GAAG,CAClC;CAEA,IAAI,YAAY,SAAS,GACvB,MAAM,IAAI,MAAM,uBAAuB,YAAY,KAAK,GAAG,GAAG;CAGhE,OAAO;EACL;EACA,cAAc,QAAQ,eAAe;EACrC;EACA;EACA,QAAQ,IAAI,OAAO;EACnB,QAAQ,IAAI,OAAO;CACrB;AACF;;;;;;;AAQA,eAAe,qBAAqB,KAAe;CACjD,MAAM,WAAW,IAAI,QAAQ,GAAE,CAAE,KAAK;CAEtC,IAAI,CAAC,SAAS;EAKZ,OACE,oQAIF;EACA,QAAQ,KAAK,CAAC;CAChB;CAEA,MAAM,UAAU,WAAW,OAAO;CAElC,IAAI,CAAC,SAAS;CAEd,MAAM,sBAAsB;CAE5B,MAAM,iBAAiB,IAAI,MAAM,2BAA2B;CAE5D,IAAI,CAAC,sBAAsB,cAAc,GAAG;EAC1C,OACE,4BAA4B,eAAe,uBAAuB,yBAAyB,KAAK,IAAI,GACtG;EACA,QAAQ,KAAK,CAAC;CAChB;CAEA,kBAAkB,cAAc;CAEhC,IAAI;CAEJ,IAAI;EACF,UAAU,6BAA6B,GAAG;CAC5C,SAAS,OAAO;EACd,OAAQ,MAAgB,OAAO;EAC/B,QAAQ,KAAK,CAAC;CAChB;CAUA,MAAM,SAAS;EAPb;EACA,SAAS;EACT;EACA,YAAY,kBAAkB;EAC9B;CAGsB,CAAC;AAC3B"}

package/esm/helpers/app.mjs

@@ -1,5 +1,6 @@
 import { getDatabaseDriver } from "../features/database-drivers.mjs";
 import { executeCommand, runCommand } from "./exec.mjs";
+import { insertImportInSortedPosition } from "./insert-import.mjs";
 import { getPackageManager } from "./package-manager.mjs";
 import { packageRoot, template } from "./paths.mjs";
 import { fallbackRange } from "./warlock-versions.mjs";
@@ -70,12 +71,6 @@ var App = class {
 		const pkg = this.package.replace("name", this.name.replaceAll("/", "-"));
 		const content = pkg.content;
 		if (typeof content.scripts?.serve === "string") content.scripts.serve = content.scripts.serve.replaceAll("yarn", packageManager);
-		const hooks = content.huskier?.hooks;
-		if (hooks) for (const hook of Object.keys(hooks)) {
-			const commands = hooks[hook];
-			if (!Array.isArray(commands)) continue;
-			hooks[hook] = commands.map((command) => typeof command === "string" ? command.replaceAll("yarn", packageManager) : command);
-		}
 		const warlockVersion = getJsonFile(packageRoot("package.json")).version;
 		const defaultRange = fallbackRange(warlockVersion);
 		for (const field of ["dependencies", "devDependencies"]) {
@@ -179,7 +174,7 @@ var App = class {
 		putJsonFile(packageJsonPath, packageJson);
 		const configPath = path.resolve(this.path, "warlock.config.ts");
 		const config = getFile(configPath);
-		if (!config.includes("\"@warlock.js/web/connector\"")) putFile(configPath, `import { webConnector } from "@warlock.js/web/connector";\n${config}`.replace("export default defineConfig({", "export default defineConfig({\n  connectors: [webConnector()],"));
+		if (!config.includes("\"@warlock.js/web/connector\"")) putFile(configPath, insertImportInSortedPosition(config, "import { webConnector } from \"@warlock.js/web/connector\";", "@warlock.js/web/connector").replace("export default defineConfig({", "export default defineConfig({\n  connectors: [webConnector()],"));
 		return this;
 	}
 	/**

package/esm/helpers/app.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"app.mjs","names":[],"sources":["../../../../../../create-warlock/src/helpers/app.ts"],"sourcesContent":["import {\r\n  copyDirectory,\r\n  copyFile,\r\n  fileExists,\r\n  getFile,\r\n  getJsonFile,\r\n  putFile,\r\n  putJsonFile,\r\n  renameFile,\r\n} from \"@warlock.js/fs\";\r\nimport { existsSync, rmSync, unlinkSync } from \"node:fs\";\r\nimport path from \"path\";\r\nimport { Application, AppOptions } from \"../commands/create-new-app/types\";\r\nimport { getDatabaseDriver } from \"../features/database-drivers\";\r\nimport { executeCommand, runCommand } from \"./exec\";\r\nimport { getPackageManager } from \"./package-manager\";\r\nimport { packageRoot, Template, template } from \"./paths\";\r\nimport { fallbackRange } from \"./warlock-versions\";\r\n\r\n/**\r\n * Environment for every install the scaffolder spawns.\r\n *\r\n * A shell that exports `NODE_ENV=production` makes the package managers skip\r\n * every devDependency — and still exit 0. The scaffolded project needs its dev\r\n * toolchain (typescript, vitest, eslint) to be usable at all, so the install\r\n * child is pinned to `development` regardless of the ambient environment. A\r\n * silently incomplete install that reports success is the exact failure mode\r\n * this file exists to prevent.\r\n */\r\nexport function installEnvironment(): NodeJS.ProcessEnv {\r\n  return { NODE_ENV: \"development\" };\r\n}\r\n\r\nexport class App {\r\n  /**\r\n   * Resolved files\r\n   */\r\n  protected files: Record<string, FileManager> = {};\r\n\r\n  /**\r\n   * Resolved JSON files\r\n   */\r\n  protected jsonFiles: Record<string, JsonFileManager> = {};\r\n\r\n  public isInstalled = false;\r\n\r\n  public constructor(protected app: Application) {}\r\n\r\n  public get options(): AppOptions {\r\n    return this.app.options;\r\n  }\r\n\r\n  public use(templateName: Template) {\r\n    copyDirectory(template(templateName), this.path);\r\n\r\n    if (fileExists(this.path + \"/.env.example\")) {\r\n      copyFile(this.path + \"/.env.example\", this.path + \"/.env\");\r\n    }\r\n\r\n    renameFile(this.path + \"/_.gitignore\", this.path + \"/.gitignore\");\r\n\r\n    return this;\r\n  }\r\n\r\n  public init() {\r\n    return this;\r\n  }\r\n\r\n  public terminate() {\r\n    // No longer using outro, using showSuccessScreen instead\r\n  }\r\n\r\n  public install() {\r\n    return runCommand(getPackageManager(), [\"install\"], this.path, {\r\n      env: installEnvironment(),\r\n    });\r\n  }\r\n\r\n  public async exec(command: string) {\r\n    const [commandName, ...optionsList] = command.split(\" \");\r\n    return await executeCommand(commandName, optionsList, this.path);\r\n  }\r\n\r\n  public async git() {\r\n    const { initializeGitRepository } =\r\n      await import(\"./project-builder-helpers\");\r\n    return await initializeGitRepository(this.path);\r\n  }\r\n\r\n  /**\r\n   * Write the project's `package.json`: the project name, the chosen package\r\n   * manager, and the version of every `@warlock.js/*` dependency.\r\n   *\r\n   * `versions` comes from {@link resolveWarlockVersions} — versions the\r\n   * registry has confirmed exist. It is optional because the fluent chain is\r\n   * synchronous; without it every sibling gets the caret range floored to the\r\n   * scaffolder's major, which is always satisfiable by a published release.\r\n   *\r\n   * What it must NEVER do again is stamp the scaffolder's own version blind:\r\n   * the release tooling bumps that version on every build, published or not,\r\n   * so an unverified pin resolves to nothing and the install dies with ETARGET.\r\n   */\r\n  public updatePackageJson(versions: Record<string, string> = {}) {\r\n    const packageManager = getPackageManager();\r\n\r\n    const pkg = this.package.replace(\"name\", this.name.replaceAll(\"/\", \"-\"));\r\n\r\n    const content: any = pkg.content;\r\n\r\n    // Substitute the chosen package manager ONLY into the fields the template\r\n    // writes it into literally — the `serve` script and the huskier hooks — by\r\n    // path, never with a blanket substring replace over the serialized JSON. A\r\n    // raw `replaceAll(\"yarn\", pm)` rewrites every occurrence of the substring\r\n    // \"yarn\" anywhere in the document, so a project named `my-yarn-app`, or any\r\n    // dependency/path containing \"yarn\", is silently corrupted (`--pm=npm`\r\n    // turned `my-yarn-app` into `my-npm-app`). Field-scoped rewriting is also\r\n    // order-independent: the name lives in `content.name` and these tokens live\r\n    // in `scripts.serve` / `huskier.hooks`, disjoint fields that cannot collide\r\n    // with the name substitution above regardless of which runs first.\r\n    if (typeof content.scripts?.serve === \"string\") {\r\n      content.scripts.serve = content.scripts.serve.replaceAll(\r\n        \"yarn\",\r\n        packageManager,\r\n      );\r\n    }\r\n\r\n    const hooks = content.huskier?.hooks as Record<string, unknown> | undefined;\r\n\r\n    if (hooks) {\r\n      for (const hook of Object.keys(hooks)) {\r\n        const commands = hooks[hook];\r\n\r\n        if (!Array.isArray(commands)) continue;\r\n\r\n        hooks[hook] = commands.map(command =>\r\n          typeof command === \"string\"\r\n            ? command.replaceAll(\"yarn\", packageManager)\r\n            : command,\r\n        );\r\n      }\r\n    }\r\n\r\n    const warlockVersion: string = (\r\n      getJsonFile(packageRoot(\"package.json\")) as { version: string }\r\n    ).version;\r\n    const defaultRange = fallbackRange(warlockVersion);\r\n\r\n    for (const field of [\"dependencies\", \"devDependencies\"] as const) {\r\n      const deps = content[field] as Record<string, string> | undefined;\r\n      if (!deps) continue;\r\n\r\n      for (const dependency of Object.keys(deps)) {\r\n        if (dependency.startsWith(\"@warlock.js/\")) {\r\n          deps[dependency] = versions[dependency] ?? defaultRange;\r\n        }\r\n      }\r\n    }\r\n\r\n    pkg.save();\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Configure the chosen database driver: wire `DB_DRIVER` / `DB_PORT` into\r\n   * `.env`, AND pin the driver's npm package (`mongodb` / `pg`) into the\r\n   * project's `package.json` dependencies.\r\n   *\r\n   * The dependency is written HERE — before the base `yarn install` — so the\r\n   * driver is pulled deterministically by the very first install. We do NOT\r\n   * rely on the post-copy `warlock add <driver> --no-install` + separate\r\n   * batched install, which can be skipped or fail and leave the driver\r\n   * missing (the \"mongodb package is not installed\" runtime error).\r\n   */\r\n  public configureDatabaseEnv(driverValue: string) {\r\n    const driver = getDatabaseDriver(driverValue);\r\n\r\n    if (!driver) return this;\r\n\r\n    // Pin the driver package into dependencies (idempotent — never downgrade).\r\n    const packageJsonPath = path.resolve(this.path, \"package.json\");\r\n    const packageJson = getJsonFile(packageJsonPath) as {\r\n      dependencies?: Record<string, string>;\r\n    };\r\n    packageJson.dependencies = packageJson.dependencies ?? {};\r\n    if (!packageJson.dependencies[driver.package]) {\r\n      packageJson.dependencies[driver.package] = driver.packageVersion;\r\n      putJsonFile(packageJsonPath, packageJson);\r\n    }\r\n\r\n    let envContent = getFile(this.path + \"/.env\") as string;\r\n\r\n    envContent = envContent.replace(\r\n      /DB_PORT=\\d+/,\r\n      `DB_PORT=${driver.defaultPort}`,\r\n    );\r\n\r\n    if (envContent.includes(\"DB_DRIVER=\")) {\r\n      envContent = envContent.replace(\r\n        /DB_DRIVER=\\w*/,\r\n        `DB_DRIVER=${driver.value}`,\r\n      );\r\n    } else {\r\n      envContent = envContent.replace(\r\n        /DB_PORT=\\d+/,\r\n        `DB_PORT=${driver.defaultPort}\\nDB_DRIVER=${driver.value}`,\r\n      );\r\n    }\r\n\r\n    putFile(this.path + \"/.env\", envContent);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Remove the database layer for a \"no database\" scaffold.\r\n   *\r\n   * Deletes `src/config/database.ts` (and a `.tsx` variant if present) from the\r\n   * freshly-copied template. The framework's database connector is config-gated\r\n   * on that file — with it gone, `config.get(\"database\")` is undefined and the\r\n   * connector no-ops, so the app boots with no database wired and no driver\r\n   * package pulled. The `DB_*` lines in `.env` are left in place (harmless: no\r\n   * config reads them) as a ready template for adding a database back later.\r\n   */\r\n  public removeDatabaseConfig() {\r\n    const configDir = path.resolve(this.path, \"src/config\");\r\n\r\n    for (const fileName of [\"database.ts\", \"database.tsx\"]) {\r\n      const filePath = path.resolve(configDir, fileName);\r\n\r\n      if (fileExists(filePath)) {\r\n        unlinkSync(filePath);\r\n      }\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Configure the web starter only when the web feature owns `/`.\r\n   *\r\n   * A dependency-free HTTP response is retained without web; otherwise the\r\n   * SSR page loader owns the route.\r\n   * Exactly one survives the scaffold: web projects keep the SSR page and API\r\n   * example; every other project keeps the dependency-free JSON controller.\r\n   */\r\n  public configureWebStarter(useWeb: boolean) {\r\n    const remove = (relativePath: string) => {\r\n      const target = path.resolve(this.path, relativePath);\r\n      if (existsSync(target)) rmSync(target, { recursive: true, force: true });\r\n    };\r\n\r\n    if (!useWeb) {\r\n      for (const entry of [\r\n        \"src/web\",\r\n        \"src/app/contact\",\r\n        \"src/app/locale\",\r\n        \"src/shared/contact.schema.ts\",\r\n        \"src/shared/locale.schema.ts\",\r\n        \"src/shared/locales.ts\",\r\n        \"postcss.config.mjs\",\r\n      ]) {\r\n        remove(entry);\r\n      }\r\n\r\n      const tsconfigPath = path.resolve(this.path, \"tsconfig.json\");\r\n      const tsconfig = getFile(tsconfigPath) as string;\r\n      putFile(\r\n        tsconfigPath,\r\n        tsconfig\r\n          .replace('      \"web/*\": [\"./src/web/*\"],\\n', \"\")\r\n          .replace('      \"@shared/*\": [\"./src/shared/*\"]\\n', \"\"),\r\n      );\r\n\r\n      return this;\r\n    }\r\n\r\n    // The SSR page owns `/`; its loader still uses src/app/home/services.\r\n    remove(\"src/app/home/controllers/home-page.controller.ts\");\r\n    remove(\"src/app/home/routes.ts\");\r\n\r\n    const packageJsonPath = path.resolve(this.path, \"package.json\");\r\n    const packageJson = getJsonFile(packageJsonPath) as {\r\n      dependencies?: Record<string, string>;\r\n      devDependencies?: Record<string, string>;\r\n    };\r\n    packageJson.dependencies = {\r\n      ...packageJson.dependencies,\r\n      \"@mongez/http\": \"^3.5.0\",\r\n      \"@mongez/react-form\": \"^4.0.0\",\r\n    };\r\n    packageJson.devDependencies = {\r\n      ...packageJson.devDependencies,\r\n      \"@tailwindcss/postcss\": \"^4.1.16\",\r\n      tailwindcss: \"^4.1.16\",\r\n    };\r\n    putJsonFile(packageJsonPath, packageJson);\r\n\r\n    const configPath = path.resolve(this.path, \"warlock.config.ts\");\r\n    const config = getFile(configPath) as string;\r\n    if (!config.includes('\"@warlock.js/web/connector\"')) {\r\n      putFile(\r\n        configPath,\r\n        `import { webConnector } from \"@warlock.js/web/connector\";\\n${config}`.replace(\r\n          \"export default defineConfig({\",\r\n          \"export default defineConfig({\\n  connectors: [webConnector()],\",\r\n        ),\r\n      );\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Install the selected optional features by delegating to the project's own\r\n   * `warlock add`. `--no-install` records every dependency in package.json and\r\n   * ejects configs / scripts / setup hooks WITHOUT installing — the caller runs\r\n   * one batched install afterwards. Versions come from core's feature map, so\r\n   * the scaffolder never duplicates them.\r\n   *\r\n   * `--no-install` is passed LAST on purpose: the CLI parser treats the\r\n   * positional after a bare flag as that flag's value, so it must follow the\r\n   * feature list, not precede it.\r\n   */\r\n  public async installFeatures(features: string[]) {\r\n    if (features.length === 0) return true;\r\n\r\n    return this.exec(`npx warlock add ${features.join(\" \")} --no-install`);\r\n  }\r\n\r\n  /**\r\n   * Force a single copy of `vite` when the project ends up with BOTH `vite`\r\n   * (written by the `web` feature) and `vitest` (always in the template).\r\n   *\r\n   * `vitest` depends on vite through a wide range of its own\r\n   * (`^6 || ^7 || ^8`), which resolves to a DIFFERENT major than the range the\r\n   * feature map pins. Yarn 1 then has to nest the second copy under\r\n   * `vitest/node_modules` and dies on its own linker invariant:\r\n   *\r\n   *     error Invariant Violation: could not find a copy of vite to link in\r\n   *       <project>/node_modules/vitest/node_modules\r\n   *\r\n   * It aborts BEFORE `node_modules/.bin` is written, so `warlock` is never\r\n   * linked and the very first `yarn dev` fails with \"'warlock' is not\r\n   * recognized\". npm and pnpm nest happily and never hit this — for them the\r\n   * `overrides` twin below is one copy instead of two, not a crash fix.\r\n   *\r\n   * The pin is READ BACK from whatever range the project's own package.json\r\n   * declares, never re-stated as a literal here: the feature map in\r\n   * `@warlock.js/core` owns the version, and a second copy of it would drift\r\n   * the moment that one moves.\r\n   *\r\n   * Returns whether a pin was written, so the caller (and its spec) can assert\r\n   * it instead of assuming it.\r\n   */\r\n  public pinViteResolution() {\r\n    const packageJsonPath = path.resolve(this.path, \"package.json\");\r\n\r\n    if (!fileExists(packageJsonPath)) return false;\r\n\r\n    const packageJson = getJsonFile(packageJsonPath) as {\r\n      dependencies?: Record<string, string>;\r\n      devDependencies?: Record<string, string>;\r\n      resolutions?: Record<string, string>;\r\n      overrides?: Record<string, string>;\r\n    };\r\n\r\n    const declaredRange = (name: string) =>\r\n      packageJson.dependencies?.[name] ?? packageJson.devDependencies?.[name];\r\n\r\n    const viteRange = declaredRange(\"vite\");\r\n\r\n    // No vite, or no vitest to conflict with it — nothing to pin. Writing a\r\n    // resolution for a package the project does not depend on would only\r\n    // freeze a transitive tree nobody asked us to freeze.\r\n    if (!viteRange || !declaredRange(\"vitest\")) return false;\r\n\r\n    // yarn 1 / yarn berry read `resolutions`; npm 8+ and pnpm read `overrides`.\r\n    packageJson.resolutions = { ...packageJson.resolutions, vite: viteRange };\r\n    packageJson.overrides = { ...packageJson.overrides, vite: viteRange };\r\n\r\n    putJsonFile(packageJsonPath, packageJson);\r\n\r\n    return true;\r\n  }\r\n\r\n  /**\r\n   * Get package json file\r\n   */\r\n  public get package() {\r\n    return this.json(\"package.json\");\r\n  }\r\n\r\n  public updateDotEnv() {\r\n    this.file(\".env\").replaceAll(\"appName\", this.name).save();\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get env file to update\r\n   */\r\n  public get env() {\r\n    return this.file(\".env\");\r\n  }\r\n\r\n  public get name() {\r\n    return this.app.appName;\r\n  }\r\n\r\n  public get path() {\r\n    return this.app.appPath;\r\n  }\r\n\r\n  public file(relativePath: string) {\r\n    const fullPath = path.resolve(this.path, relativePath);\r\n\r\n    if (!this.files[fullPath]) {\r\n      this.files[fullPath] = file(fullPath);\r\n    }\r\n\r\n    return this.files[fullPath];\r\n  }\r\n\r\n  public json(relativePath: string): JsonFileManager {\r\n    const fullPath = path.resolve(this.path, relativePath);\r\n\r\n    if (!this.jsonFiles[fullPath]) {\r\n      this.jsonFiles[fullPath] = jsonFile(fullPath);\r\n    }\r\n\r\n    return this.jsonFiles[fullPath];\r\n  }\r\n}\r\n\r\nexport function app(app: Application) {\r\n  return new App(app);\r\n}\r\n\r\nexport class FileManager {\r\n  public content!: string;\r\n  public constructor(protected filePath: string) {\r\n    this.parseContent();\r\n  }\r\n\r\n  protected parseContent() {\r\n    this.content = getFile(this.filePath) as string;\r\n  }\r\n\r\n  public replace(search: string, replace: string) {\r\n    this.content = this.content.replace(search, replace);\r\n\r\n    return this;\r\n  }\r\n\r\n  public replaceAll(search: string, replace: string) {\r\n    this.content = this.content.replaceAll(search, replace);\r\n\r\n    return this;\r\n  }\r\n\r\n  public save() {\r\n    putFile(this.filePath, this.content);\r\n  }\r\n}\r\n\r\nexport class JsonFileManager extends FileManager {\r\n  protected parseContent() {\r\n    this.content = getJsonFile(this.filePath);\r\n  }\r\n\r\n  public save() {\r\n    putJsonFile(this.filePath, this.content);\r\n  }\r\n\r\n  public has(key: string) {\r\n    return this.content[key] !== undefined;\r\n  }\r\n\r\n  public replace(key: string, value: any) {\r\n    this.content[key] = value;\r\n\r\n    return this;\r\n  }\r\n\r\n  public replaceAll(key: string, value: any) {\r\n    const contentAsString = JSON.stringify(this.content);\r\n\r\n    this.content = JSON.parse(contentAsString.replaceAll(key, value));\r\n\r\n    return this;\r\n  }\r\n}\r\n\r\nexport function file(path: string) {\r\n  return new FileManager(path);\r\n}\r\n\r\nexport function jsonFile(path: string) {\r\n  return new JsonFileManager(path);\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA6BA,SAAgB,qBAAwC;CACtD,OAAO,EAAE,UAAU,cAAc;AACnC;AAEA,IAAa,MAAb,MAAiB;CAaf,AAAO,YAAY,AAAU,KAAkB;EAAlB;eATkB,CAAC;mBAKO,CAAC;qBAEnC;CAE2B;CAEhD,IAAW,UAAsB;EAC/B,OAAO,KAAK,IAAI;CAClB;CAEA,AAAO,IAAI,cAAwB;EACjC,cAAc,SAAS,YAAY,GAAG,KAAK,IAAI;EAE/C,IAAI,WAAW,KAAK,OAAO,eAAe,GACxC,SAAS,KAAK,OAAO,iBAAiB,KAAK,OAAO,OAAO;EAG3D,WAAW,KAAK,OAAO,gBAAgB,KAAK,OAAO,aAAa;EAEhE,OAAO;CACT;CAEA,AAAO,OAAO;EACZ,OAAO;CACT;CAEA,AAAO,YAAY,CAEnB;CAEA,AAAO,UAAU;EACf,OAAO,WAAW,kBAAkB,GAAG,CAAC,SAAS,GAAG,KAAK,MAAM,EAC7D,KAAK,mBAAmB,EAC1B,CAAC;CACH;CAEA,MAAa,KAAK,SAAiB;EACjC,MAAM,CAAC,aAAa,GAAG,eAAe,QAAQ,MAAM,GAAG;EACvD,OAAO,MAAM,eAAe,aAAa,aAAa,KAAK,IAAI;CACjE;CAEA,MAAa,MAAM;EACjB,MAAM,EAAE,4BACN,MAAM,OAAO;EACf,OAAO,MAAM,wBAAwB,KAAK,IAAI;CAChD;;;;;;;;;;;;;;CAeA,AAAO,kBAAkB,WAAmC,CAAC,GAAG;EAC9D,MAAM,iBAAiB,kBAAkB;EAEzC,MAAM,MAAM,KAAK,QAAQ,QAAQ,QAAQ,KAAK,KAAK,WAAW,KAAK,GAAG,CAAC;EAEvE,MAAM,UAAe,IAAI;EAYzB,IAAI,OAAO,QAAQ,SAAS,UAAU,UACpC,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,WAC5C,QACA,cACF;EAGF,MAAM,QAAQ,QAAQ,SAAS;EAE/B,IAAI,OACF,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,GAAG;GACrC,MAAM,WAAW,MAAM;GAEvB,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG;GAE9B,MAAM,QAAQ,SAAS,KAAI,YACzB,OAAO,YAAY,WACf,QAAQ,WAAW,QAAQ,cAAc,IACzC,OACN;EACF;EAGF,MAAM,iBACJ,YAAY,YAAY,cAAc,CAAC,CAAC,CACxC;EACF,MAAM,eAAe,cAAc,cAAc;EAEjD,KAAK,MAAM,SAAS,CAAC,gBAAgB,iBAAiB,GAAY;GAChE,MAAM,OAAO,QAAQ;GACrB,IAAI,CAAC,MAAM;GAEX,KAAK,MAAM,cAAc,OAAO,KAAK,IAAI,GACvC,IAAI,WAAW,WAAW,cAAc,GACtC,KAAK,cAAc,SAAS,eAAe;EAGjD;EAEA,IAAI,KAAK;EAET,OAAO;CACT;;;;;;;;;;;;CAaA,AAAO,qBAAqB,aAAqB;EAC/C,MAAM,SAAS,kBAAkB,WAAW;EAE5C,IAAI,CAAC,QAAQ,OAAO;EAGpB,MAAM,kBAAkB,KAAK,QAAQ,KAAK,MAAM,cAAc;EAC9D,MAAM,cAAc,YAAY,eAAe;EAG/C,YAAY,eAAe,YAAY,gBAAgB,CAAC;EACxD,IAAI,CAAC,YAAY,aAAa,OAAO,UAAU;GAC7C,YAAY,aAAa,OAAO,WAAW,OAAO;GAClD,YAAY,iBAAiB,WAAW;EAC1C;EAEA,IAAI,aAAa,QAAQ,KAAK,OAAO,OAAO;EAE5C,aAAa,WAAW,QACtB,eACA,WAAW,OAAO,aACpB;EAEA,IAAI,WAAW,SAAS,YAAY,GAClC,aAAa,WAAW,QACtB,iBACA,aAAa,OAAO,OACtB;OAEA,aAAa,WAAW,QACtB,eACA,WAAW,OAAO,YAAY,cAAc,OAAO,OACrD;EAGF,QAAQ,KAAK,OAAO,SAAS,UAAU;EAEvC,OAAO;CACT;;;;;;;;;;;CAYA,AAAO,uBAAuB;EAC5B,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,YAAY;EAEtD,KAAK,MAAM,YAAY,CAAC,eAAe,cAAc,GAAG;GACtD,MAAM,WAAW,KAAK,QAAQ,WAAW,QAAQ;GAEjD,IAAI,WAAW,QAAQ,GACrB,WAAW,QAAQ;EAEvB;EAEA,OAAO;CACT;;;;;;;;;CAUA,AAAO,oBAAoB,QAAiB;EAC1C,MAAM,UAAU,iBAAyB;GACvC,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,YAAY;GACnD,IAAI,WAAW,MAAM,GAAG,OAAO,QAAQ;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;EACzE;EAEA,IAAI,CAAC,QAAQ;GACX,KAAK,MAAM,SAAS;IAClB;IACA;IACA;IACA;IACA;IACA;IACA;GACF,GACE,OAAO,KAAK;GAGd,MAAM,eAAe,KAAK,QAAQ,KAAK,MAAM,eAAe;GAE5D,QACE,cAFe,QAAQ,YAGhB,CAAC,CACL,QAAQ,yCAAqC,EAAE,CAAC,CAChD,QAAQ,+CAA2C,EAAE,CAC1D;GAEA,OAAO;EACT;EAGA,OAAO,kDAAkD;EACzD,OAAO,wBAAwB;EAE/B,MAAM,kBAAkB,KAAK,QAAQ,KAAK,MAAM,cAAc;EAC9D,MAAM,cAAc,YAAY,eAAe;EAI/C,YAAY,eAAe;GACzB,GAAG,YAAY;GACf,gBAAgB;GAChB,sBAAsB;EACxB;EACA,YAAY,kBAAkB;GAC5B,GAAG,YAAY;GACf,wBAAwB;GACxB,aAAa;EACf;EACA,YAAY,iBAAiB,WAAW;EAExC,MAAM,aAAa,KAAK,QAAQ,KAAK,MAAM,mBAAmB;EAC9D,MAAM,SAAS,QAAQ,UAAU;EACjC,IAAI,CAAC,OAAO,SAAS,+BAA6B,GAChD,QACE,YACA,8DAA8D,SAAS,QACrE,iCACA,gEACF,CACF;EAGF,OAAO;CACT;;;;;;;;;;;;CAaA,MAAa,gBAAgB,UAAoB;EAC/C,IAAI,SAAS,WAAW,GAAG,OAAO;EAElC,OAAO,KAAK,KAAK,mBAAmB,SAAS,KAAK,GAAG,EAAE,cAAc;CACvE;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BA,AAAO,oBAAoB;EACzB,MAAM,kBAAkB,KAAK,QAAQ,KAAK,MAAM,cAAc;EAE9D,IAAI,CAAC,WAAW,eAAe,GAAG,OAAO;EAEzC,MAAM,cAAc,YAAY,eAAe;EAO/C,MAAM,iBAAiB,SACrB,YAAY,eAAe,SAAS,YAAY,kBAAkB;EAEpE,MAAM,YAAY,cAAc,MAAM;EAKtC,IAAI,CAAC,aAAa,CAAC,cAAc,QAAQ,GAAG,OAAO;EAGnD,YAAY,cAAc;GAAE,GAAG,YAAY;GAAa,MAAM;EAAU;EACxE,YAAY,YAAY;GAAE,GAAG,YAAY;GAAW,MAAM;EAAU;EAEpE,YAAY,iBAAiB,WAAW;EAExC,OAAO;CACT;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,KAAK,cAAc;CACjC;CAEA,AAAO,eAAe;EACpB,KAAK,KAAK,MAAM,CAAC,CAAC,WAAW,WAAW,KAAK,IAAI,CAAC,CAAC,KAAK;EAExD,OAAO;CACT;;;;CAKA,IAAW,MAAM;EACf,OAAO,KAAK,KAAK,MAAM;CACzB;CAEA,IAAW,OAAO;EAChB,OAAO,KAAK,IAAI;CAClB;CAEA,IAAW,OAAO;EAChB,OAAO,KAAK,IAAI;CAClB;CAEA,AAAO,KAAK,cAAsB;EAChC,MAAM,WAAW,KAAK,QAAQ,KAAK,MAAM,YAAY;EAErD,IAAI,CAAC,KAAK,MAAM,WACd,KAAK,MAAM,YAAY,KAAK,QAAQ;EAGtC,OAAO,KAAK,MAAM;CACpB;CAEA,AAAO,KAAK,cAAuC;EACjD,MAAM,WAAW,KAAK,QAAQ,KAAK,MAAM,YAAY;EAErD,IAAI,CAAC,KAAK,UAAU,WAClB,KAAK,UAAU,YAAY,SAAS,QAAQ;EAG9C,OAAO,KAAK,UAAU;CACxB;AACF;AAMA,IAAa,cAAb,MAAyB;CAEvB,AAAO,YAAY,AAAU,UAAkB;EAAlB;EAC3B,KAAK,aAAa;CACpB;CAEA,AAAU,eAAe;EACvB,KAAK,UAAU,QAAQ,KAAK,QAAQ;CACtC;CAEA,AAAO,QAAQ,QAAgB,SAAiB;EAC9C,KAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,OAAO;EAEnD,OAAO;CACT;CAEA,AAAO,WAAW,QAAgB,SAAiB;EACjD,KAAK,UAAU,KAAK,QAAQ,WAAW,QAAQ,OAAO;EAEtD,OAAO;CACT;CAEA,AAAO,OAAO;EACZ,QAAQ,KAAK,UAAU,KAAK,OAAO;CACrC;AACF;AAEA,IAAa,kBAAb,cAAqC,YAAY;CAC/C,AAAU,eAAe;EACvB,KAAK,UAAU,YAAY,KAAK,QAAQ;CAC1C;CAEA,AAAO,OAAO;EACZ,YAAY,KAAK,UAAU,KAAK,OAAO;CACzC;CAEA,AAAO,IAAI,KAAa;EACtB,OAAO,KAAK,QAAQ,SAAS;CAC/B;CAEA,AAAO,QAAQ,KAAa,OAAY;EACtC,KAAK,QAAQ,OAAO;EAEpB,OAAO;CACT;CAEA,AAAO,WAAW,KAAa,OAAY;EACzC,MAAM,kBAAkB,KAAK,UAAU,KAAK,OAAO;EAEnD,KAAK,UAAU,KAAK,MAAM,gBAAgB,WAAW,KAAK,KAAK,CAAC;EAEhE,OAAO;CACT;AACF;AAEA,SAAgB,KAAK,MAAc;CACjC,OAAO,IAAI,YAAY,IAAI;AAC7B;AAEA,SAAgB,SAAS,MAAc;CACrC,OAAO,IAAI,gBAAgB,IAAI;AACjC"}
+{"version":3,"file":"app.mjs","names":[],"sources":["../../../../../../create-warlock/src/helpers/app.ts"],"sourcesContent":["import {\r\n  copyDirectory,\r\n  copyFile,\r\n  fileExists,\r\n  getFile,\r\n  getJsonFile,\r\n  putFile,\r\n  putJsonFile,\r\n  renameFile,\r\n} from \"@warlock.js/fs\";\r\nimport { existsSync, rmSync, unlinkSync } from \"node:fs\";\r\nimport path from \"path\";\r\nimport { Application, AppOptions } from \"../commands/create-new-app/types\";\r\nimport { getDatabaseDriver } from \"../features/database-drivers\";\r\nimport { executeCommand, runCommand } from \"./exec\";\r\nimport { insertImportInSortedPosition } from \"./insert-import\";\r\nimport { getPackageManager } from \"./package-manager\";\r\nimport { packageRoot, Template, template } from \"./paths\";\r\nimport { fallbackRange } from \"./warlock-versions\";\r\n\r\n/**\r\n * Environment for every install the scaffolder spawns.\r\n *\r\n * A shell that exports `NODE_ENV=production` makes the package managers skip\r\n * every devDependency — and still exit 0. The scaffolded project needs its dev\r\n * toolchain (typescript, vitest, eslint) to be usable at all, so the install\r\n * child is pinned to `development` regardless of the ambient environment. A\r\n * silently incomplete install that reports success is the exact failure mode\r\n * this file exists to prevent.\r\n */\r\nexport function installEnvironment(): NodeJS.ProcessEnv {\r\n  return { NODE_ENV: \"development\" };\r\n}\r\n\r\nexport class App {\r\n  /**\r\n   * Resolved files\r\n   */\r\n  protected files: Record<string, FileManager> = {};\r\n\r\n  /**\r\n   * Resolved JSON files\r\n   */\r\n  protected jsonFiles: Record<string, JsonFileManager> = {};\r\n\r\n  public isInstalled = false;\r\n\r\n  public constructor(protected app: Application) {}\r\n\r\n  public get options(): AppOptions {\r\n    return this.app.options;\r\n  }\r\n\r\n  public use(templateName: Template) {\r\n    copyDirectory(template(templateName), this.path);\r\n\r\n    if (fileExists(this.path + \"/.env.example\")) {\r\n      copyFile(this.path + \"/.env.example\", this.path + \"/.env\");\r\n    }\r\n\r\n    renameFile(this.path + \"/_.gitignore\", this.path + \"/.gitignore\");\r\n\r\n    return this;\r\n  }\r\n\r\n  public init() {\r\n    return this;\r\n  }\r\n\r\n  public terminate() {\r\n    // No longer using outro, using showSuccessScreen instead\r\n  }\r\n\r\n  public install() {\r\n    return runCommand(getPackageManager(), [\"install\"], this.path, {\r\n      env: installEnvironment(),\r\n    });\r\n  }\r\n\r\n  public async exec(command: string) {\r\n    const [commandName, ...optionsList] = command.split(\" \");\r\n    return await executeCommand(commandName, optionsList, this.path);\r\n  }\r\n\r\n  public async git() {\r\n    const { initializeGitRepository } =\r\n      await import(\"./project-builder-helpers\");\r\n    return await initializeGitRepository(this.path);\r\n  }\r\n\r\n  /**\r\n   * Write the project's `package.json`: the project name, the chosen package\r\n   * manager, and the version of every `@warlock.js/*` dependency.\r\n   *\r\n   * `versions` comes from {@link resolveWarlockVersions} — versions the\r\n   * registry has confirmed exist. It is optional because the fluent chain is\r\n   * synchronous; without it every sibling gets the caret range floored to the\r\n   * scaffolder's major, which is always satisfiable by a published release.\r\n   *\r\n   * What it must NEVER do again is stamp the scaffolder's own version blind:\r\n   * the release tooling bumps that version on every build, published or not,\r\n   * so an unverified pin resolves to nothing and the install dies with ETARGET.\r\n   */\r\n  public updatePackageJson(versions: Record<string, string> = {}) {\r\n    const packageManager = getPackageManager();\r\n\r\n    const pkg = this.package.replace(\"name\", this.name.replaceAll(\"/\", \"-\"));\r\n\r\n    const content: any = pkg.content;\r\n\r\n    // Substitute the chosen package manager ONLY into the fields the template\r\n    // writes it into literally — the `serve` script — by path, never with a\r\n    // blanket substring replace over the serialized JSON. A raw\r\n    // `replaceAll(\"yarn\", pm)` rewrites every occurrence of the substring\r\n    // \"yarn\" anywhere in the document, so a project named `my-yarn-app`, or any\r\n    // dependency/path containing \"yarn\", is silently corrupted (`--pm=npm`\r\n    // turned `my-yarn-app` into `my-npm-app`). Field-scoped rewriting is also\r\n    // order-independent: the name lives in `content.name` and this token lives\r\n    // in `scripts.serve`, a disjoint field that cannot collide with the name\r\n    // substitution above regardless of which runs first.\r\n    if (typeof content.scripts?.serve === \"string\") {\r\n      content.scripts.serve = content.scripts.serve.replaceAll(\r\n        \"yarn\",\r\n        packageManager,\r\n      );\r\n    }\r\n\r\n    const warlockVersion: string = (\r\n      getJsonFile(packageRoot(\"package.json\")) as { version: string }\r\n    ).version;\r\n    const defaultRange = fallbackRange(warlockVersion);\r\n\r\n    for (const field of [\"dependencies\", \"devDependencies\"] as const) {\r\n      const deps = content[field] as Record<string, string> | undefined;\r\n      if (!deps) continue;\r\n\r\n      for (const dependency of Object.keys(deps)) {\r\n        if (dependency.startsWith(\"@warlock.js/\")) {\r\n          deps[dependency] = versions[dependency] ?? defaultRange;\r\n        }\r\n      }\r\n    }\r\n\r\n    pkg.save();\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Configure the chosen database driver: wire `DB_DRIVER` / `DB_PORT` into\r\n   * `.env`, AND pin the driver's npm package (`mongodb` / `pg`) into the\r\n   * project's `package.json` dependencies.\r\n   *\r\n   * The dependency is written HERE — before the base `yarn install` — so the\r\n   * driver is pulled deterministically by the very first install. We do NOT\r\n   * rely on the post-copy `warlock add <driver> --no-install` + separate\r\n   * batched install, which can be skipped or fail and leave the driver\r\n   * missing (the \"mongodb package is not installed\" runtime error).\r\n   */\r\n  public configureDatabaseEnv(driverValue: string) {\r\n    const driver = getDatabaseDriver(driverValue);\r\n\r\n    if (!driver) return this;\r\n\r\n    // Pin the driver package into dependencies (idempotent — never downgrade).\r\n    const packageJsonPath = path.resolve(this.path, \"package.json\");\r\n    const packageJson = getJsonFile(packageJsonPath) as {\r\n      dependencies?: Record<string, string>;\r\n    };\r\n    packageJson.dependencies = packageJson.dependencies ?? {};\r\n    if (!packageJson.dependencies[driver.package]) {\r\n      packageJson.dependencies[driver.package] = driver.packageVersion;\r\n      putJsonFile(packageJsonPath, packageJson);\r\n    }\r\n\r\n    let envContent = getFile(this.path + \"/.env\") as string;\r\n\r\n    envContent = envContent.replace(\r\n      /DB_PORT=\\d+/,\r\n      `DB_PORT=${driver.defaultPort}`,\r\n    );\r\n\r\n    if (envContent.includes(\"DB_DRIVER=\")) {\r\n      envContent = envContent.replace(\r\n        /DB_DRIVER=\\w*/,\r\n        `DB_DRIVER=${driver.value}`,\r\n      );\r\n    } else {\r\n      envContent = envContent.replace(\r\n        /DB_PORT=\\d+/,\r\n        `DB_PORT=${driver.defaultPort}\\nDB_DRIVER=${driver.value}`,\r\n      );\r\n    }\r\n\r\n    putFile(this.path + \"/.env\", envContent);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Remove the database layer for a \"no database\" scaffold.\r\n   *\r\n   * Deletes `src/config/database.ts` (and a `.tsx` variant if present) from the\r\n   * freshly-copied template. The framework's database connector is config-gated\r\n   * on that file — with it gone, `config.get(\"database\")` is undefined and the\r\n   * connector no-ops, so the app boots with no database wired and no driver\r\n   * package pulled. The `DB_*` lines in `.env` are left in place (harmless: no\r\n   * config reads them) as a ready template for adding a database back later.\r\n   */\r\n  public removeDatabaseConfig() {\r\n    const configDir = path.resolve(this.path, \"src/config\");\r\n\r\n    for (const fileName of [\"database.ts\", \"database.tsx\"]) {\r\n      const filePath = path.resolve(configDir, fileName);\r\n\r\n      if (fileExists(filePath)) {\r\n        unlinkSync(filePath);\r\n      }\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Configure the web starter only when the web feature owns `/`.\r\n   *\r\n   * A dependency-free HTTP response is retained without web; otherwise the\r\n   * SSR page loader owns the route.\r\n   * Exactly one survives the scaffold: web projects keep the SSR page and API\r\n   * example; every other project keeps the dependency-free JSON controller.\r\n   */\r\n  public configureWebStarter(useWeb: boolean) {\r\n    const remove = (relativePath: string) => {\r\n      const target = path.resolve(this.path, relativePath);\r\n      if (existsSync(target)) rmSync(target, { recursive: true, force: true });\r\n    };\r\n\r\n    if (!useWeb) {\r\n      for (const entry of [\r\n        \"src/web\",\r\n        \"src/app/contact\",\r\n        \"src/app/locale\",\r\n        \"src/shared/contact.schema.ts\",\r\n        \"src/shared/locale.schema.ts\",\r\n        \"src/shared/locales.ts\",\r\n        \"postcss.config.mjs\",\r\n      ]) {\r\n        remove(entry);\r\n      }\r\n\r\n      const tsconfigPath = path.resolve(this.path, \"tsconfig.json\");\r\n      const tsconfig = getFile(tsconfigPath) as string;\r\n      putFile(\r\n        tsconfigPath,\r\n        tsconfig\r\n          .replace('      \"web/*\": [\"./src/web/*\"],\\n', \"\")\r\n          .replace('      \"@shared/*\": [\"./src/shared/*\"]\\n', \"\"),\r\n      );\r\n\r\n      return this;\r\n    }\r\n\r\n    // The SSR page owns `/`; its loader still uses src/app/home/services.\r\n    remove(\"src/app/home/controllers/home-page.controller.ts\");\r\n    remove(\"src/app/home/routes.ts\");\r\n\r\n    const packageJsonPath = path.resolve(this.path, \"package.json\");\r\n    const packageJson = getJsonFile(packageJsonPath) as {\r\n      dependencies?: Record<string, string>;\r\n      devDependencies?: Record<string, string>;\r\n    };\r\n    packageJson.dependencies = {\r\n      ...packageJson.dependencies,\r\n      \"@mongez/http\": \"^3.5.0\",\r\n      \"@mongez/react-form\": \"^4.0.0\",\r\n    };\r\n    packageJson.devDependencies = {\r\n      ...packageJson.devDependencies,\r\n      \"@tailwindcss/postcss\": \"^4.1.16\",\r\n      tailwindcss: \"^4.1.16\",\r\n    };\r\n    putJsonFile(packageJsonPath, packageJson);\r\n\r\n    const configPath = path.resolve(this.path, \"warlock.config.ts\");\r\n    const config = getFile(configPath) as string;\r\n    if (!config.includes('\"@warlock.js/web/connector\"')) {\r\n      // Inserted in sorted position, not prepended. The generated app formats\r\n      // with `prettier-plugin-organize-imports`, so an import pushed to the top\r\n      // of a file that already imports `@warlock.js/auth` and `@warlock.js/core`\r\n      // is out of order the moment it is written — and the developer meets it as\r\n      // a `prettier/prettier` error on their first `warlock dev`, in a file they\r\n      // did not write.\r\n      const withConnector = insertImportInSortedPosition(\r\n        config,\r\n        'import { webConnector } from \"@warlock.js/web/connector\";',\r\n        \"@warlock.js/web/connector\",\r\n      );\r\n\r\n      putFile(\r\n        configPath,\r\n        withConnector.replace(\r\n          \"export default defineConfig({\",\r\n          \"export default defineConfig({\\n  connectors: [webConnector()],\",\r\n        ),\r\n      );\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Install the selected optional features by delegating to the project's own\r\n   * `warlock add`. `--no-install` records every dependency in package.json and\r\n   * ejects configs / scripts / setup hooks WITHOUT installing — the caller runs\r\n   * one batched install afterwards. Versions come from core's feature map, so\r\n   * the scaffolder never duplicates them.\r\n   *\r\n   * `--no-install` is passed LAST on purpose: the CLI parser treats the\r\n   * positional after a bare flag as that flag's value, so it must follow the\r\n   * feature list, not precede it.\r\n   */\r\n  public async installFeatures(features: string[]) {\r\n    if (features.length === 0) return true;\r\n\r\n    return this.exec(`npx warlock add ${features.join(\" \")} --no-install`);\r\n  }\r\n\r\n  /**\r\n   * Force a single copy of `vite` when the project ends up with BOTH `vite`\r\n   * (written by the `web` feature) and `vitest` (always in the template).\r\n   *\r\n   * `vitest` depends on vite through a wide range of its own\r\n   * (`^6 || ^7 || ^8`), which resolves to a DIFFERENT major than the range the\r\n   * feature map pins. Yarn 1 then has to nest the second copy under\r\n   * `vitest/node_modules` and dies on its own linker invariant:\r\n   *\r\n   *     error Invariant Violation: could not find a copy of vite to link in\r\n   *       <project>/node_modules/vitest/node_modules\r\n   *\r\n   * It aborts BEFORE `node_modules/.bin` is written, so `warlock` is never\r\n   * linked and the very first `yarn dev` fails with \"'warlock' is not\r\n   * recognized\". npm and pnpm nest happily and never hit this — for them the\r\n   * `overrides` twin below is one copy instead of two, not a crash fix.\r\n   *\r\n   * The pin is READ BACK from whatever range the project's own package.json\r\n   * declares, never re-stated as a literal here: the feature map in\r\n   * `@warlock.js/core` owns the version, and a second copy of it would drift\r\n   * the moment that one moves.\r\n   *\r\n   * Returns whether a pin was written, so the caller (and its spec) can assert\r\n   * it instead of assuming it.\r\n   */\r\n  public pinViteResolution() {\r\n    const packageJsonPath = path.resolve(this.path, \"package.json\");\r\n\r\n    if (!fileExists(packageJsonPath)) return false;\r\n\r\n    const packageJson = getJsonFile(packageJsonPath) as {\r\n      dependencies?: Record<string, string>;\r\n      devDependencies?: Record<string, string>;\r\n      resolutions?: Record<string, string>;\r\n      overrides?: Record<string, string>;\r\n    };\r\n\r\n    const declaredRange = (name: string) =>\r\n      packageJson.dependencies?.[name] ?? packageJson.devDependencies?.[name];\r\n\r\n    const viteRange = declaredRange(\"vite\");\r\n\r\n    // No vite, or no vitest to conflict with it — nothing to pin. Writing a\r\n    // resolution for a package the project does not depend on would only\r\n    // freeze a transitive tree nobody asked us to freeze.\r\n    if (!viteRange || !declaredRange(\"vitest\")) return false;\r\n\r\n    // yarn 1 / yarn berry read `resolutions`; npm 8+ and pnpm read `overrides`.\r\n    packageJson.resolutions = { ...packageJson.resolutions, vite: viteRange };\r\n    packageJson.overrides = { ...packageJson.overrides, vite: viteRange };\r\n\r\n    putJsonFile(packageJsonPath, packageJson);\r\n\r\n    return true;\r\n  }\r\n\r\n  /**\r\n   * Get package json file\r\n   */\r\n  public get package() {\r\n    return this.json(\"package.json\");\r\n  }\r\n\r\n  public updateDotEnv() {\r\n    this.file(\".env\").replaceAll(\"appName\", this.name).save();\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get env file to update\r\n   */\r\n  public get env() {\r\n    return this.file(\".env\");\r\n  }\r\n\r\n  public get name() {\r\n    return this.app.appName;\r\n  }\r\n\r\n  public get path() {\r\n    return this.app.appPath;\r\n  }\r\n\r\n  public file(relativePath: string) {\r\n    const fullPath = path.resolve(this.path, relativePath);\r\n\r\n    if (!this.files[fullPath]) {\r\n      this.files[fullPath] = file(fullPath);\r\n    }\r\n\r\n    return this.files[fullPath];\r\n  }\r\n\r\n  public json(relativePath: string): JsonFileManager {\r\n    const fullPath = path.resolve(this.path, relativePath);\r\n\r\n    if (!this.jsonFiles[fullPath]) {\r\n      this.jsonFiles[fullPath] = jsonFile(fullPath);\r\n    }\r\n\r\n    return this.jsonFiles[fullPath];\r\n  }\r\n}\r\n\r\nexport function app(app: Application) {\r\n  return new App(app);\r\n}\r\n\r\nexport class FileManager {\r\n  public content!: string;\r\n  public constructor(protected filePath: string) {\r\n    this.parseContent();\r\n  }\r\n\r\n  protected parseContent() {\r\n    this.content = getFile(this.filePath) as string;\r\n  }\r\n\r\n  public replace(search: string, replace: string) {\r\n    this.content = this.content.replace(search, replace);\r\n\r\n    return this;\r\n  }\r\n\r\n  public replaceAll(search: string, replace: string) {\r\n    this.content = this.content.replaceAll(search, replace);\r\n\r\n    return this;\r\n  }\r\n\r\n  public save() {\r\n    putFile(this.filePath, this.content);\r\n  }\r\n}\r\n\r\nexport class JsonFileManager extends FileManager {\r\n  protected parseContent() {\r\n    this.content = getJsonFile(this.filePath);\r\n  }\r\n\r\n  public save() {\r\n    putJsonFile(this.filePath, this.content);\r\n  }\r\n\r\n  public has(key: string) {\r\n    return this.content[key] !== undefined;\r\n  }\r\n\r\n  public replace(key: string, value: any) {\r\n    this.content[key] = value;\r\n\r\n    return this;\r\n  }\r\n\r\n  public replaceAll(key: string, value: any) {\r\n    const contentAsString = JSON.stringify(this.content);\r\n\r\n    this.content = JSON.parse(contentAsString.replaceAll(key, value));\r\n\r\n    return this;\r\n  }\r\n}\r\n\r\nexport function file(path: string) {\r\n  return new FileManager(path);\r\n}\r\n\r\nexport function jsonFile(path: string) {\r\n  return new JsonFileManager(path);\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,qBAAwC;CACtD,OAAO,EAAE,UAAU,cAAc;AACnC;AAEA,IAAa,MAAb,MAAiB;CAaf,AAAO,YAAY,AAAU,KAAkB;EAAlB;eATkB,CAAC;mBAKO,CAAC;qBAEnC;CAE2B;CAEhD,IAAW,UAAsB;EAC/B,OAAO,KAAK,IAAI;CAClB;CAEA,AAAO,IAAI,cAAwB;EACjC,cAAc,SAAS,YAAY,GAAG,KAAK,IAAI;EAE/C,IAAI,WAAW,KAAK,OAAO,eAAe,GACxC,SAAS,KAAK,OAAO,iBAAiB,KAAK,OAAO,OAAO;EAG3D,WAAW,KAAK,OAAO,gBAAgB,KAAK,OAAO,aAAa;EAEhE,OAAO;CACT;CAEA,AAAO,OAAO;EACZ,OAAO;CACT;CAEA,AAAO,YAAY,CAEnB;CAEA,AAAO,UAAU;EACf,OAAO,WAAW,kBAAkB,GAAG,CAAC,SAAS,GAAG,KAAK,MAAM,EAC7D,KAAK,mBAAmB,EAC1B,CAAC;CACH;CAEA,MAAa,KAAK,SAAiB;EACjC,MAAM,CAAC,aAAa,GAAG,eAAe,QAAQ,MAAM,GAAG;EACvD,OAAO,MAAM,eAAe,aAAa,aAAa,KAAK,IAAI;CACjE;CAEA,MAAa,MAAM;EACjB,MAAM,EAAE,4BACN,MAAM,OAAO;EACf,OAAO,MAAM,wBAAwB,KAAK,IAAI;CAChD;;;;;;;;;;;;;;CAeA,AAAO,kBAAkB,WAAmC,CAAC,GAAG;EAC9D,MAAM,iBAAiB,kBAAkB;EAEzC,MAAM,MAAM,KAAK,QAAQ,QAAQ,QAAQ,KAAK,KAAK,WAAW,KAAK,GAAG,CAAC;EAEvE,MAAM,UAAe,IAAI;EAYzB,IAAI,OAAO,QAAQ,SAAS,UAAU,UACpC,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,WAC5C,QACA,cACF;EAGF,MAAM,iBACJ,YAAY,YAAY,cAAc,CAAC,CAAC,CACxC;EACF,MAAM,eAAe,cAAc,cAAc;EAEjD,KAAK,MAAM,SAAS,CAAC,gBAAgB,iBAAiB,GAAY;GAChE,MAAM,OAAO,QAAQ;GACrB,IAAI,CAAC,MAAM;GAEX,KAAK,MAAM,cAAc,OAAO,KAAK,IAAI,GACvC,IAAI,WAAW,WAAW,cAAc,GACtC,KAAK,cAAc,SAAS,eAAe;EAGjD;EAEA,IAAI,KAAK;EAET,OAAO;CACT;;;;;;;;;;;;CAaA,AAAO,qBAAqB,aAAqB;EAC/C,MAAM,SAAS,kBAAkB,WAAW;EAE5C,IAAI,CAAC,QAAQ,OAAO;EAGpB,MAAM,kBAAkB,KAAK,QAAQ,KAAK,MAAM,cAAc;EAC9D,MAAM,cAAc,YAAY,eAAe;EAG/C,YAAY,eAAe,YAAY,gBAAgB,CAAC;EACxD,IAAI,CAAC,YAAY,aAAa,OAAO,UAAU;GAC7C,YAAY,aAAa,OAAO,WAAW,OAAO;GAClD,YAAY,iBAAiB,WAAW;EAC1C;EAEA,IAAI,aAAa,QAAQ,KAAK,OAAO,OAAO;EAE5C,aAAa,WAAW,QACtB,eACA,WAAW,OAAO,aACpB;EAEA,IAAI,WAAW,SAAS,YAAY,GAClC,aAAa,WAAW,QACtB,iBACA,aAAa,OAAO,OACtB;OAEA,aAAa,WAAW,QACtB,eACA,WAAW,OAAO,YAAY,cAAc,OAAO,OACrD;EAGF,QAAQ,KAAK,OAAO,SAAS,UAAU;EAEvC,OAAO;CACT;;;;;;;;;;;CAYA,AAAO,uBAAuB;EAC5B,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,YAAY;EAEtD,KAAK,MAAM,YAAY,CAAC,eAAe,cAAc,GAAG;GACtD,MAAM,WAAW,KAAK,QAAQ,WAAW,QAAQ;GAEjD,IAAI,WAAW,QAAQ,GACrB,WAAW,QAAQ;EAEvB;EAEA,OAAO;CACT;;;;;;;;;CAUA,AAAO,oBAAoB,QAAiB;EAC1C,MAAM,UAAU,iBAAyB;GACvC,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,YAAY;GACnD,IAAI,WAAW,MAAM,GAAG,OAAO,QAAQ;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;EACzE;EAEA,IAAI,CAAC,QAAQ;GACX,KAAK,MAAM,SAAS;IAClB;IACA;IACA;IACA;IACA;IACA;IACA;GACF,GACE,OAAO,KAAK;GAGd,MAAM,eAAe,KAAK,QAAQ,KAAK,MAAM,eAAe;GAE5D,QACE,cAFe,QAAQ,YAGhB,CAAC,CACL,QAAQ,yCAAqC,EAAE,CAAC,CAChD,QAAQ,+CAA2C,EAAE,CAC1D;GAEA,OAAO;EACT;EAGA,OAAO,kDAAkD;EACzD,OAAO,wBAAwB;EAE/B,MAAM,kBAAkB,KAAK,QAAQ,KAAK,MAAM,cAAc;EAC9D,MAAM,cAAc,YAAY,eAAe;EAI/C,YAAY,eAAe;GACzB,GAAG,YAAY;GACf,gBAAgB;GAChB,sBAAsB;EACxB;EACA,YAAY,kBAAkB;GAC5B,GAAG,YAAY;GACf,wBAAwB;GACxB,aAAa;EACf;EACA,YAAY,iBAAiB,WAAW;EAExC,MAAM,aAAa,KAAK,QAAQ,KAAK,MAAM,mBAAmB;EAC9D,MAAM,SAAS,QAAQ,UAAU;EACjC,IAAI,CAAC,OAAO,SAAS,+BAA6B,GAahD,QACE,YAPoB,6BACpB,QACA,+DACA,2BAKY,CAAC,CAAC,QACZ,iCACA,gEACF,CACF;EAGF,OAAO;CACT;;;;;;;;;;;;CAaA,MAAa,gBAAgB,UAAoB;EAC/C,IAAI,SAAS,WAAW,GAAG,OAAO;EAElC,OAAO,KAAK,KAAK,mBAAmB,SAAS,KAAK,GAAG,EAAE,cAAc;CACvE;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BA,AAAO,oBAAoB;EACzB,MAAM,kBAAkB,KAAK,QAAQ,KAAK,MAAM,cAAc;EAE9D,IAAI,CAAC,WAAW,eAAe,GAAG,OAAO;EAEzC,MAAM,cAAc,YAAY,eAAe;EAO/C,MAAM,iBAAiB,SACrB,YAAY,eAAe,SAAS,YAAY,kBAAkB;EAEpE,MAAM,YAAY,cAAc,MAAM;EAKtC,IAAI,CAAC,aAAa,CAAC,cAAc,QAAQ,GAAG,OAAO;EAGnD,YAAY,cAAc;GAAE,GAAG,YAAY;GAAa,MAAM;EAAU;EACxE,YAAY,YAAY;GAAE,GAAG,YAAY;GAAW,MAAM;EAAU;EAEpE,YAAY,iBAAiB,WAAW;EAExC,OAAO;CACT;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,KAAK,cAAc;CACjC;CAEA,AAAO,eAAe;EACpB,KAAK,KAAK,MAAM,CAAC,CAAC,WAAW,WAAW,KAAK,IAAI,CAAC,CAAC,KAAK;EAExD,OAAO;CACT;;;;CAKA,IAAW,MAAM;EACf,OAAO,KAAK,KAAK,MAAM;CACzB;CAEA,IAAW,OAAO;EAChB,OAAO,KAAK,IAAI;CAClB;CAEA,IAAW,OAAO;EAChB,OAAO,KAAK,IAAI;CAClB;CAEA,AAAO,KAAK,cAAsB;EAChC,MAAM,WAAW,KAAK,QAAQ,KAAK,MAAM,YAAY;EAErD,IAAI,CAAC,KAAK,MAAM,WACd,KAAK,MAAM,YAAY,KAAK,QAAQ;EAGtC,OAAO,KAAK,MAAM;CACpB;CAEA,AAAO,KAAK,cAAuC;EACjD,MAAM,WAAW,KAAK,QAAQ,KAAK,MAAM,YAAY;EAErD,IAAI,CAAC,KAAK,UAAU,WAClB,KAAK,UAAU,YAAY,SAAS,QAAQ;EAG9C,OAAO,KAAK,UAAU;CACxB;AACF;AAMA,IAAa,cAAb,MAAyB;CAEvB,AAAO,YAAY,AAAU,UAAkB;EAAlB;EAC3B,KAAK,aAAa;CACpB;CAEA,AAAU,eAAe;EACvB,KAAK,UAAU,QAAQ,KAAK,QAAQ;CACtC;CAEA,AAAO,QAAQ,QAAgB,SAAiB;EAC9C,KAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,OAAO;EAEnD,OAAO;CACT;CAEA,AAAO,WAAW,QAAgB,SAAiB;EACjD,KAAK,UAAU,KAAK,QAAQ,WAAW,QAAQ,OAAO;EAEtD,OAAO;CACT;CAEA,AAAO,OAAO;EACZ,QAAQ,KAAK,UAAU,KAAK,OAAO;CACrC;AACF;AAEA,IAAa,kBAAb,cAAqC,YAAY;CAC/C,AAAU,eAAe;EACvB,KAAK,UAAU,YAAY,KAAK,QAAQ;CAC1C;CAEA,AAAO,OAAO;EACZ,YAAY,KAAK,UAAU,KAAK,OAAO;CACzC;CAEA,AAAO,IAAI,KAAa;EACtB,OAAO,KAAK,QAAQ,SAAS;CAC/B;CAEA,AAAO,QAAQ,KAAa,OAAY;EACtC,KAAK,QAAQ,OAAO;EAEpB,OAAO;CACT;CAEA,AAAO,WAAW,KAAa,OAAY;EACzC,MAAM,kBAAkB,KAAK,UAAU,KAAK,OAAO;EAEnD,KAAK,UAAU,KAAK,MAAM,gBAAgB,WAAW,KAAK,KAAK,CAAC;EAEhE,OAAO;CACT;AACF;AAEA,SAAgB,KAAK,MAAc;CACjC,OAAO,IAAI,YAAY,IAAI;AAC7B;AAEA,SAAgB,SAAS,MAAc;CACrC,OAAO,IAAI,gBAAgB,IAAI;AACjC"}

package/esm/helpers/insert-import.mjs

@@ -0,0 +1,51 @@
+//#region ../create-warlock/src/helpers/insert-import.ts
+/**
+* Splice an `import` statement into a generated source file **in sorted
+* position**, rather than pushing it to the top.
+*
+* The scaffolded app formats with `prettier-plugin-organize-imports`, which
+* orders imports alphabetically by module specifier. So an import prepended to
+* a file that already has some is, by construction, in the wrong place — and
+* the developer meets it as a `prettier/prettier` error on their very first
+* `warlock dev`, in a file they did not write, about code they did not add.
+*
+* That is the defect class this scaffolder keeps paying for: a failure that
+* waits for the user's first ordinary action and then arrives attributed to
+* them.
+*/
+/**
+* Matches a top-level import statement and captures its module specifier.
+*
+* Deliberately narrow: this reads files THIS scaffolder generates from its own
+* templates, not arbitrary user source. It handles the two forms those
+* templates actually contain — a single-line import and a braced multi-line one
+* — and is not a general TypeScript parser. If a template ever grows an import
+* shape this misses, the insertion falls back to appending after the last match,
+* which is still ordered relative to everything it did recognise.
+*/
+const IMPORT_STATEMENT = /^import\s[\s\S]*?from\s+["']([^"']+)["'];?$/gm;
+/**
+* Insert `statement` into `source` so the import block stays alphabetically
+* ordered by module specifier.
+*
+* @param source     the file's current contents.
+* @param statement  the whole import line to add, without a trailing newline.
+* @param specifier  the module specifier `statement` imports from — passed
+*                   rather than re-parsed, because the caller already knows it
+*                   and a second parser is a second thing to disagree.
+* @returns the file contents with the import in place. A file with no imports
+*          at all gets it at the top, which is the only ordering available.
+*/
+function insertImportInSortedPosition(source, statement, specifier) {
+	const matches = [...source.matchAll(IMPORT_STATEMENT)];
+	if (matches.length === 0) return `${statement}\n${source}`;
+	const successor = matches.find((match) => match[1].localeCompare(specifier) > 0);
+	if (successor) return `${source.slice(0, successor.index)}${statement}\n${source.slice(successor.index)}`;
+	const last = matches[matches.length - 1];
+	const endOfLast = last.index + last[0].length;
+	return `${source.slice(0, endOfLast)}\n${statement}${source.slice(endOfLast)}`;
+}
+
+//#endregion
+export { insertImportInSortedPosition };
+//# sourceMappingURL=insert-import.mjs.map

package/esm/helpers/insert-import.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"insert-import.mjs","names":[],"sources":["../../../../../../create-warlock/src/helpers/insert-import.ts"],"sourcesContent":["/**\n * Splice an `import` statement into a generated source file **in sorted\n * position**, rather than pushing it to the top.\n *\n * The scaffolded app formats with `prettier-plugin-organize-imports`, which\n * orders imports alphabetically by module specifier. So an import prepended to\n * a file that already has some is, by construction, in the wrong place — and\n * the developer meets it as a `prettier/prettier` error on their very first\n * `warlock dev`, in a file they did not write, about code they did not add.\n *\n * That is the defect class this scaffolder keeps paying for: a failure that\n * waits for the user's first ordinary action and then arrives attributed to\n * them.\n */\n\n/**\n * Matches a top-level import statement and captures its module specifier.\n *\n * Deliberately narrow: this reads files THIS scaffolder generates from its own\n * templates, not arbitrary user source. It handles the two forms those\n * templates actually contain — a single-line import and a braced multi-line one\n * — and is not a general TypeScript parser. If a template ever grows an import\n * shape this misses, the insertion falls back to appending after the last match,\n * which is still ordered relative to everything it did recognise.\n */\nconst IMPORT_STATEMENT = /^import\\s[\\s\\S]*?from\\s+[\"']([^\"']+)[\"'];?$/gm;\n\n/**\n * Insert `statement` into `source` so the import block stays alphabetically\n * ordered by module specifier.\n *\n * @param source     the file's current contents.\n * @param statement  the whole import line to add, without a trailing newline.\n * @param specifier  the module specifier `statement` imports from — passed\n *                   rather than re-parsed, because the caller already knows it\n *                   and a second parser is a second thing to disagree.\n * @returns the file contents with the import in place. A file with no imports\n *          at all gets it at the top, which is the only ordering available.\n */\nexport function insertImportInSortedPosition(\n  source: string,\n  statement: string,\n  specifier: string,\n): string {\n  const matches = [...source.matchAll(IMPORT_STATEMENT)];\n\n  if (matches.length === 0) {\n    return `${statement}\\n${source}`;\n  }\n\n  const successor = matches.find(match => (match[1] as string).localeCompare(specifier) > 0);\n\n  if (successor) {\n    return `${source.slice(0, successor.index)}${statement}\\n${source.slice(successor.index)}`;\n  }\n\n  const last = matches[matches.length - 1] as RegExpMatchArray;\n  const endOfLast = (last.index as number) + last[0].length;\n\n  return `${source.slice(0, endOfLast)}\\n${statement}${source.slice(endOfLast)}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAM,mBAAmB;;;;;;;;;;;;;AAczB,SAAgB,6BACd,QACA,WACA,WACQ;CACR,MAAM,UAAU,CAAC,GAAG,OAAO,SAAS,gBAAgB,CAAC;CAErD,IAAI,QAAQ,WAAW,GACrB,OAAO,GAAG,UAAU,IAAI;CAG1B,MAAM,YAAY,QAAQ,MAAK,UAAU,MAAM,EAAE,CAAY,cAAc,SAAS,IAAI,CAAC;CAEzF,IAAI,WACF,OAAO,GAAG,OAAO,MAAM,GAAG,UAAU,KAAK,IAAI,UAAU,IAAI,OAAO,MAAM,UAAU,KAAK;CAGzF,MAAM,OAAO,QAAQ,QAAQ,SAAS;CACtC,MAAM,YAAa,KAAK,QAAmB,KAAK,EAAE,CAAC;CAEnD,OAAO,GAAG,OAAO,MAAM,GAAG,SAAS,EAAE,IAAI,YAAY,OAAO,MAAM,SAAS;AAC7E"}

package/esm/helpers/tty.mjs

@@ -0,0 +1,22 @@
+//#region ../create-warlock/src/helpers/tty.ts
+/**
+* Whether stdin is attached to an interactive terminal.
+*
+* A scaffolder spawned by CI, a script, or an agent harness has no TTY on
+* stdin — `process.stdin.isTTY` is `undefined` there. Prompting anyway does
+* not fail cleanly: `@clack/prompts` tries to put a non-existent terminal
+* into raw mode and Node's libuv layer throws `TTY initialization failed:
+* uv_tty_init returned EBADF (bad file descriptor)` before a single file is
+* written. That is an internal implementation detail leaking to a developer
+* whose only mistake was not being at a keyboard.
+*
+* Isolated in its own module (rather than read inline) so tests can mock the
+* non-interactive case without spawning a real detached process every time.
+*/
+function hasInteractiveStdin() {
+	return Boolean(process.stdin.isTTY);
+}
+
+//#endregion
+export { hasInteractiveStdin };
+//# sourceMappingURL=tty.mjs.map

package/esm/helpers/tty.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tty.mjs","names":[],"sources":["../../../../../../create-warlock/src/helpers/tty.ts"],"sourcesContent":["/**\n * Whether stdin is attached to an interactive terminal.\n *\n * A scaffolder spawned by CI, a script, or an agent harness has no TTY on\n * stdin — `process.stdin.isTTY` is `undefined` there. Prompting anyway does\n * not fail cleanly: `@clack/prompts` tries to put a non-existent terminal\n * into raw mode and Node's libuv layer throws `TTY initialization failed:\n * uv_tty_init returned EBADF (bad file descriptor)` before a single file is\n * written. That is an internal implementation detail leaking to a developer\n * whose only mistake was not being at a keyboard.\n *\n * Isolated in its own module (rather than read inline) so tests can mock the\n * non-interactive case without spawning a real detached process every time.\n */\nexport function hasInteractiveStdin(): boolean {\n  return Boolean(process.stdin.isTTY);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAcA,SAAgB,sBAA+B;CAC7C,OAAO,QAAQ,QAAQ,MAAM,KAAK;AACpC"}

package/llms-full.txt

@@ -19,7 +19,7 @@ description: 'Scaffold a brand-new Warlock.js project with `create-warlock` —
 
 ```bash
 # Interactive wizard (recommended for humans)
-yarn create warlock
+pnpm create warlock
 # or: npm create warlock@latest / pnpm create warlock / npx create-warlock
 
 # Non-interactive (CI, agents, reproducible setups) — one command scaffolds the whole app
@@ -47,6 +47,20 @@ The wizard asks, in order:
 
 Pass `--yes` (or `-y`) to skip every prompt and build from flags with defaults.
 
+**Without a terminal, `--yes` is not required.** When stdin is not a TTY — CI, a
+script, a container, an agent harness — the scaffolder does not try to prompt.
+If the flags already answer everything it needs, it simply scaffolds. Prompting
+is the fallback, not the precondition.
+
+Only a question that genuinely cannot be answered stops the run, and in practice
+that is just the project name, the one prompt with no default:
+
+```
+A project name is required and no terminal is available to ask for one. Pass it as
+the first argument or --name=<name>. Non-interactive flags: --yes, --pm=<npm|yarn|pnpm>,
+--db=<driver>|--no-db, --features=<list>, --ai=<list>, --git|--no-git, --jwt|--no-jwt.
+```
+
 | Flag                     | Takes value | Default        | Purpose                                                              |
 | ------------------------ | ----------- | -------------- | ------------------------------------------------------------------- |
 | `<positional>` / `--name`| yes         | — (required)   | Project name + target directory.                                    |

package/package.json

@@ -12,13 +12,13 @@
   "dependencies": {
     "@clack/prompts": "^0.7.0",
     "@mongez/copper": "^2.1.2",
-    "@warlock.js/fs": "5.3.1",
+    "@warlock.js/fs": "5.4.0",
     "@mongez/reinforcements": "^4.0.1",
     "cross-spawn": "^7.0.3",
     "rimraf": "^6.0.1",
     "which-pm-runs": "^1.1.0"
   },
-  "version": "5.3.1",
+  "version": "5.4.0",
   "type": "module",
   "main": "./esm/index.mjs",
   "module": "./esm/index.mjs",

package/skills/create-a-warlock-project/SKILL.md

@@ -39,6 +39,20 @@ The wizard asks, in order:
 
 Pass `--yes` (or `-y`) to skip every prompt and build from flags with defaults.
 
+**Without a terminal, `--yes` is not required.** When stdin is not a TTY — CI, a
+script, a container, an agent harness — the scaffolder does not try to prompt.
+If the flags already answer everything it needs, it simply scaffolds. Prompting
+is the fallback, not the precondition.
+
+Only a question that genuinely cannot be answered stops the run, and in practice
+that is just the project name, the one prompt with no default:
+
+```
+A project name is required and no terminal is available to ask for one. Pass it as
+the first argument or --name=<name>. Non-interactive flags: --yes, --pm=<npm|yarn|pnpm>,
+--db=<driver>|--no-db, --features=<list>, --ai=<list>, --git|--no-git, --jwt|--no-jwt.
+```
+
 | Flag                     | Takes value | Default        | Purpose                                                              |
 | ------------------------ | ----------- | -------------- | ------------------------------------------------------------------- |
 | `<positional>` / `--name`| yes         | — (required)   | Project name + target directory.                                    |

package/templates/warlock/package.json

@@ -25,7 +25,6 @@
     "lint": "npx eslint --fix ./src --max-warnings=0",
     "format": "npx prettier --write ./src/**/*.{js,jsx,ts,tsx,css,md,json} --config ./.prettierrc.json",
     "tsc": "npx tsc --noEmit",
-    "prepare": "huskier-init && husky install",
     "postinstall": "agent-kit init && agent-kit sync || echo skills-sync-skipped",
     "skills:sync": "agent-kit sync",
     "skills:watch": "agent-kit watch",
@@ -47,7 +46,6 @@
   },
   "devDependencies": {
     "@mongez/agent-kit": "^1.2.1",
-    "@mongez/huskier": "^3.0.0",
     "@types/node": "^25.0.3",
     "@types/prettier": "^3.0.0",
     "@typescript-eslint/eslint-plugin": "^8.50.0",
@@ -59,16 +57,6 @@
     "prettier": "^3.7.4",
     "prettier-plugin-organize-imports": "^4.3.0",
     "typescript": "^5.9.3",
-    "husky": "^8.0.0",
     "vitest": "^4.0.6"
-  },
-  "huskier": {
-    "hooks": {
-      "pre-commit": [
-        "yarn format",
-        "yarn lint",
-        "yarn tsc"
-      ]
-    }
   }
 }

package/templates/warlock/pnpm-workspace.yaml

@@ -0,0 +1,2 @@
+allowBuilds:
+  esbuild: true

package/templates/warlock/src/app/auth/utils/types.ts

@@ -7,8 +7,4 @@ export type OTPChannel = "email" | "sms" | "whatsapp" | "push";
  * Common OTP types
  */
 export type OTPType =
-  | "password-reset"
-  | "email-verification"
-  | "phone-verification"
-  | "two-factor"
-  | string;
+  "password-reset" | "email-verification" | "phone-verification" | "two-factor" | string;

package/templates/warlock/.husky/pre-commit

@@ -1,4 +0,0 @@
-#!/usr/bin/env sh
-. "$(dirname -- "$0")/_/husky.sh"
-
-npm test