generator-kodly-react-app 1.0.15 → 1.0.17

package/generators/app/index.js

@@ -16,16 +16,27 @@ export default class ReactAppGenerator extends BaseGenerator {
     this._writeLandingFiles();
     this._writeAppModuleFiles();
     this._writeSdkFiles();
+    this._writeDir('scripts');
+    this._writeDir('tests');
   }
 
   _writeConfigFiles() {
     const configFiles = [
       'package.json',
+      'oxlint.config.ts',
+      'stylelint.config.js',
+      'vitest.config.ts',
+      '.node-version',
+      'pnpm-workspace.yaml',
+      '.pnpmfile.cjs',
+      'AGENTS.md',
+      '.prettierignore',
+      'TESTING.md',
       'vite.config.js',
       'tsconfig.json',
       'tsconfig.app.json',
+      'tsr.config.json',
       'tailwind.config.js',
-      'postcss.config.js',
       'index.html',
       'components.json',
       'openapi-ts.config.ts',
@@ -70,6 +81,8 @@ export default class ReactAppGenerator extends BaseGenerator {
   _writeAuthFiles() {
     const authFiles = [
       'src/modules/auth/components/signup-form.tsx',
+      'src/modules/auth/components/auth-form.tsx',
+      'src/modules/auth/components/login-link.tsx',
       'src/modules/auth/components/forgot-password-form.tsx',
       'src/modules/auth/components/reset-password-form.tsx',
       'src/modules/auth/components/login-form.tsx',
@@ -86,6 +99,7 @@ export default class ReactAppGenerator extends BaseGenerator {
   _writeComponentFiles() {
     const componentFiles = [
       'src/components/layout/language-switcher.tsx',
+      'src/components/layout/page-layout.tsx',
       'src/components/layout/theme-switcher.tsx',
       'src/components/theme/theme-provider.tsx',
       'src/components/ui/button.tsx',

package/generators/app/templates/.env.sandbox

@@ -1,4 +1,5 @@
 BASE_URL=/
-PORT=3000
-ALLOWED_HOSTS=sandbox.app.kodly.dev
-VITE_API_BASE_URL=${VITE_API_BASE_URL} //injected by env variables - https://{port}-{projectSlug}-{userSlug}.sandbox.app.kodly.dev
+PORT=5173
+ALLOWED_HOSTS=localhost
+# Kodly injects the connected API URL and preview host at server startup.
+VITE_API_BASE_URL=

package/generators/app/templates/.node-version

@@ -0,0 +1 @@
+26.12.1

package/generators/app/templates/.pnpmfile.cjs

@@ -0,0 +1,14 @@
+// Hey API uses the JavaScript compiler API, which TypeScript 7 no longer ships.
+// Keep its compiler private; the application and type-aware lint use TypeScript 7.
+module.exports = {
+  hooks: {
+    /** @param {{name?: string, version?: string, dependencies?: Record<string, string>, peerDependencies?: Record<string, string>}} pkg */
+    readPackage(pkg) {
+      if (pkg.name === "@hey-api/openapi-ts" && pkg.version === "0.99.0") {
+        if (pkg.peerDependencies) delete pkg.peerDependencies.typescript;
+        pkg.dependencies = { ...pkg.dependencies, typescript: "6.0.3" };
+      }
+      return pkg;
+    },
+  },
+};

package/generators/app/templates/.prettierignore

@@ -0,0 +1,13 @@
+node_modules/
+dist/
+build/
+coverage/
+.tanstack/
+.kodly*/
+*.tsbuildinfo
+# Package managers own lockfile serialization.
+pnpm-lock.yaml
+package-lock.json
+npm-shrinkwrap.json
+yarn.lock
+bun.lock

package/generators/app/templates/AGENTS.md

@@ -0,0 +1,14 @@
+# Working in this project
+
+Run `pnpm check` before handing off a change. It runs the production build and
+type checker, Oxlint with TypeScript 7 type-aware rules, shadcn design rules,
+Stylelint, Prettier, duplication detection and Vitest. Fix failures at their source.
+
+Use `unknown` and validation at data boundaries instead of `any`. Handle promises.
+Reuse the components in `src/components/ui` and the theme tokens in `src/index.css`.
+Add named component variants for reusable styles. Avoid raw colours, inline styles
+and arbitrary Tailwind values in screens. Add behaviour tests for changed features.
+
+API transport is generated by `pnpm openapi-ts:dev` or `pnpm openapi-ts:sandbox`.
+Keep handwritten code outside generated files. Do not weaken checks or turn off
+tests to get a green build. All verification configuration belongs to this repo.

package/generators/app/templates/I18N_MIGRATION.md

@@ -6,10 +6,10 @@ This document describes the i18n configuration changes that enable **both** flat
 
 The i18n setup now supports two usage patterns interchangeably:
 
-| Pattern | Example | Use case |
-|---------|---------|----------|
-| **Flat (no namespace)** | `useTranslation()` + `t('namespace.section.key')` | Quick access, explicit full path |
-| **Namespaced** | `useTranslation('namespace')` + `t('section.key')` | Modular components, shorter keys |
+| Pattern                 | Example                                            | Use case                         |
+| ----------------------- | -------------------------------------------------- | -------------------------------- |
+| **Flat (no namespace)** | `useTranslation()` + `t('namespace.section.key')`  | Quick access, explicit full path |
+| **Namespaced**          | `useTranslation('namespace')` + `t('section.key')` | Modular components, shorter keys |
 
 Previously, only the flat pattern worked because all translations lived under a single `translation` namespace. The namespaced pattern failed because i18next couldn't find the individual namespaces (the top-level keys in your merged translation object).
 
@@ -24,8 +24,8 @@ if (!i18n.isInitialized) {
   const lng = getStoredLanguage();
   i18n.use(initReactI18next).init({
     resources: {
-      en: { translation: mergeTranslations('en') },
-      ja: { translation: mergeTranslations('ja') },
+      en: { translation: mergeTranslations("en") },
+      ja: { translation: mergeTranslations("ja") },
     },
     supportedLngs: supportedLanguages,
     lng,
@@ -43,8 +43,8 @@ if (!i18n.isInitialized) {
 ```typescript
 if (!i18n.isInitialized) {
   const lng = getStoredLanguage();
-  const enResources = mergeTranslations('en');
-  const jaResources = mergeTranslations('ja');
+  const enResources = mergeTranslations("en");
+  const jaResources = mergeTranslations("ja");
   i18n.use(initReactI18next).init({
     resources: {
       en: {
@@ -56,8 +56,8 @@ if (!i18n.isInitialized) {
         ...jaResources,
       },
     },
-    defaultNS: 'translation',
-    ns: ['translation', ...Object.keys(enResources)],
+    defaultNS: "translation",
+    ns: ["translation", ...Object.keys(enResources)],
     supportedLngs: supportedLanguages,
     lng,
     fallbackLng: defaultLanguage,
@@ -103,11 +103,11 @@ You can migrate components to the namespaced pattern for shorter keys:
 ```tsx
 // Before (flat)
 const { t } = useTranslation();
-return <h1>{t('namespace.section.title')}</h1>;
+return <h1>{t("namespace.section.title")}</h1>;
 
 // After (namespaced) – optional
-const { t } = useTranslation('namespace');
-return <h1>{t('section.title')}</h1>;
+const { t } = useTranslation("namespace");
+return <h1>{t("section.title")}</h1>;
 ```
 
 Both forms work. Choose what fits your component structure.

package/generators/app/templates/STRUCTURE.md

@@ -279,10 +279,10 @@ routes/
 
 ```tsx
 // src/routes/{module}/route.tsx (Parent route)
-import { createFileRoute, Outlet } from '@tanstack/react-router';
-import { ModuleLayout } from '@/modules/{module}/layouts/{module}-layout';
+import { createFileRoute, Outlet } from "@tanstack/react-router";
+import { ModuleLayout } from "@/modules/{module}/layouts/{module}-layout";
 
-export const Route = createFileRoute('/{module}')({
+export const Route = createFileRoute("/{module}")({
   beforeLoad: ({ context }) => {
     // Guards, redirects, etc.
   },
@@ -300,10 +300,10 @@ function RouteComponent() {
 
 ```tsx
 // src/routes/{module}/{page}.tsx (Child route)
-import { createFileRoute } from '@tanstack/react-router';
-import { PageComponent } from '@/modules/{module}/components/{page}-component';
+import { createFileRoute } from "@tanstack/react-router";
+import { PageComponent } from "@/modules/{module}/components/{page}-component";
 
-export const Route = createFileRoute('/{module}/{page}')({
+export const Route = createFileRoute("/{module}/{page}")({
   component: RouteComponent,
 });
 
@@ -363,7 +363,7 @@ Translations are merged in `src/locales/index.ts`:
 
 ```typescript
 export const mergeTranslations = (lang: SupportedLanguages) => {
-  if (lang === 'en') {
+  if (lang === "en") {
     return {
       auth: { ...enAuth },
       app: { ...enApp },
@@ -379,15 +379,15 @@ export const mergeTranslations = (lang: SupportedLanguages) => {
 ### Using Translations in Components
 
 ```tsx
-import { useTranslation } from 'react-i18next';
+import { useTranslation } from "react-i18next";
 
 function MyComponent() {
   const { t } = useTranslation();
 
   return (
     <div>
-      <h1>{t('auth.login.title')}</h1>
-      <p>{t('common.welcome')}</p>
+      <h1>{t("auth.login.title")}</h1>
+      <p>{t("common.welcome")}</p>
     </div>
   );
 }
@@ -447,11 +447,11 @@ src/modules/dashboard/
 Add module translations to `src/locales/index.ts`:
 
 ```typescript
-import enDashboard from '@/modules/dashboard/locales/dashboard-en.json';
-import jaDashboard from '@/modules/dashboard/locales/dashboard-ja.json';
+import enDashboard from "@/modules/dashboard/locales/dashboard-en.json";
+import jaDashboard from "@/modules/dashboard/locales/dashboard-ja.json";
 
 export const mergeTranslations = (lang: SupportedLanguages) => {
-  if (lang === 'en') {
+  if (lang === "en") {
     return {
       // ... existing modules
       dashboard: { ...enDashboard },
@@ -472,7 +472,7 @@ export const mergeTranslations = (lang: SupportedLanguages) => {
 ```tsx
 export function DashboardLayout({ children }: { children: React.ReactNode }) {
   return (
-    <div className='dashboard-container'>
+    <div className="dashboard-container">
       {/* Dashboard-specific layout */}
       {children}
     </div>
@@ -485,10 +485,10 @@ export function DashboardLayout({ children }: { children: React.ReactNode }) {
 **`src/routes/dashboard/route.tsx`**:
 
 ```tsx
-import { createFileRoute, Outlet } from '@tanstack/react-router';
-import { DashboardLayout } from '@/modules/dashboard/layouts/dashboard-layout';
+import { createFileRoute, Outlet } from "@tanstack/react-router";
+import { DashboardLayout } from "@/modules/dashboard/layouts/dashboard-layout";
 
-export const Route = createFileRoute('/dashboard')({
+export const Route = createFileRoute("/dashboard")({
   component: RouteComponent,
 });
 
@@ -504,10 +504,10 @@ function RouteComponent() {
 **`src/routes/dashboard/index.tsx`**:
 
 ```tsx
-import { createFileRoute } from '@tanstack/react-router';
-import { DashboardPage } from '@/modules/dashboard/components/dashboard-page';
+import { createFileRoute } from "@tanstack/react-router";
+import { DashboardPage } from "@/modules/dashboard/components/dashboard-page";
 
-export const Route = createFileRoute('/dashboard/')({
+export const Route = createFileRoute("/dashboard/")({
   component: RouteComponent,
 });
 
@@ -564,7 +564,7 @@ _writeDashboardFiles() {
 
 ```tsx
 // src/modules/{module}/components/{component-name}.tsx
-import { useTranslation } from 'react-i18next';
+import { useTranslation } from "react-i18next";
 
 export function ComponentName() {
   const { t } = useTranslation();
@@ -577,7 +577,7 @@ export function ComponentName() {
 
 ```tsx
 // src/modules/{module}/hooks/use-{hook-name}.ts
-import { useAtom } from 'jotai';
+import { useAtom } from "jotai";
 
 export function useHookName() {
   // Hook logic
@@ -593,7 +593,7 @@ export function useHookName() {
 // src/modules/{module}/layouts/{module}-layout.tsx
 export function ModuleLayout({ children }: { children: React.ReactNode }) {
   return (
-    <div className='module-container'>
+    <div className="module-container">
       {/* Layout structure */}
       {children}
     </div>
@@ -605,10 +605,10 @@ export function ModuleLayout({ children }: { children: React.ReactNode }) {
 
 ```tsx
 // src/routes/{module}/{page}.tsx
-import { createFileRoute } from '@tanstack/react-router';
-import { ComponentName } from '@/modules/{module}/components/component-name';
+import { createFileRoute } from "@tanstack/react-router";
+import { ComponentName } from "@/modules/{module}/components/component-name";
 
-export const Route = createFileRoute('/{module}/{page}')({
+export const Route = createFileRoute("/{module}/{page}")({
   component: RouteComponent,
 });
 

package/generators/app/templates/TESTING.md

@@ -0,0 +1,30 @@
+# Project checks
+
+Install the declared package manager and run `pnpm install` once to create the lockfile.
+Commit that lockfile; subsequent local and CI installs use `pnpm install --frozen-lockfile`.
+
+`pnpm check` runs the build/type check, type-aware Oxlint, shadcn design rules, Stylelint, Prettier, duplicate detection and Vitest tests.
+Each step is also a package script and fails with its original exit code. All tool
+versions, rules and tests are owned by this repository and run without Kodly.
+
+- `pnpm lint` checks TypeScript 7 types, unsafe `any`, promises, React Hooks, accessibility and shadcn design conventions.
+- `pnpm lint:styles` checks CSS and requires tokens for colours outside theme token definitions.
+- `pnpm format:check` checks formatting; `pnpm format` applies it explicitly.
+- `pnpm check:duplicates` checks handwritten source at a 0.5% threshold with 50-token blocks.
+- `pnpm test` runs unit and component tests in `tests/` and `src/` once; it fails if no tests exist. Use `pnpm test:watch` while developing.
+- `pnpm check` runs every gate. A failure stops the command with a nonzero exit code.
+
+The SDK generator invokes the installed formatter. `scripts/generated-files.mjs`
+identifies generated transport by both its filename and Hey API banner. Only those
+files receive the transport-specific lint allowances and duplication exclusion;
+handwritten wrappers remain checked. Compilation and formatting still cover generated code.
+Use the existing OpenAPI configuration when the backend changes.
+
+Browser/API acceptance suites can be added with project-local dependencies and
+configuration when needed. Save their test cases in source so they also run in CI;
+do not import test tools from a Kodly scratch directory.
+
+The app and type-aware linter use TypeScript 7. The pinned Hey API generator still
+uses the older JavaScript compiler API internally. `.pnpmfile.cjs` gives only that
+package a private TypeScript 6.0.3 dependency; it never changes the app compiler.
+Remove this scoped hook once Hey API supports the TypeScript 7 compiler API.

package/generators/app/templates/index.html

@@ -4,23 +4,15 @@
     <meta charset="UTF-8" />
     <meta
       name="viewport"
-      content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
-    <meta
-      name="theme-color"
-      content="#000000" />
-    <meta
-      name="description"
-      content="<%= appNameTitleCase %>" />
-    <link
-      rel="icon"
-      type="image/svg+xml"
-      href="/favicon.svg" />
+      content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"
+    />
+    <meta name="theme-color" content="#000000" />
+    <meta name="description" content="<%= appNameTitleCase %>" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <title><%= appNameTitleCase %></title>
   </head>
   <body>
     <div id="app"></div>
-    <script
-      type="module"
-      src="/src/main.tsx"></script>
+    <script type="module" src="/src/main.tsx"></script>
   </body>
 </html>

package/generators/app/templates/openapi-ts.config.ts

@@ -1,29 +1,33 @@
-import { defineConfig } from '@hey-api/openapi-ts';
-import { loadEnv } from 'vite';
+import { defineConfig } from "@hey-api/openapi-ts";
+import { loadEnv } from "vite";
 
 // Get the mode from environment variable (set by pnpm scripts)
-const mode = process.env.MODE || 'development';
+const mode = process.env.MODE || "development";
 
 // Load environment variables from .env files
-const env = loadEnv(mode, process.cwd(), '');
+const env = loadEnv(mode, process.cwd(), "");
 
 export default defineConfig({
   input: `${env.VITE_API_BASE_URL}/v3/api-docs`,
-  output: 'src/sdk',
+  output: {
+    path: "src/sdk",
+    postProcess: ["prettier"],
+  },
   plugins: [
     {
-      name: '@hey-api/client-axios',
-      runtimeConfigPath: '@/openapi-client-config.ts',
+      name: "@hey-api/client-axios",
+      baseUrl: false,
+      runtimeConfigPath: "@/openapi-client-config.ts",
     },
-    '@tanstack/react-query',
-    'zod',
+    "@tanstack/react-query",
+    "zod",
     {
-      name: '@hey-api/sdk',
+      name: "@hey-api/sdk",
       validator: true,
     },
     {
-      name: '@hey-api/schemas',
-      type: 'json',
+      name: "@hey-api/schemas",
+      type: "json",
     },
   ],
 });

package/generators/app/templates/oxlint.config.ts

@@ -0,0 +1,72 @@
+import { defineConfig } from "oxlint";
+import { generatedFiles } from "./scripts/generated-files.mjs";
+
+// TypeScript 7 uses the native type checker; tsgolint shares that compiler.
+const typeRules = {
+  "typescript/no-explicit-any": "error",
+  "typescript/no-unsafe-assignment": "error",
+  "typescript/no-unsafe-argument": "error",
+  "typescript/no-unsafe-call": "error",
+  "typescript/no-unsafe-member-access": "error",
+  "typescript/no-unsafe-return": "error",
+  "typescript/no-floating-promises": "error",
+  "typescript/no-misused-promises": "error",
+  "typescript/no-non-null-assertion": "error",
+  "typescript/switch-exhaustiveness-check": "error",
+} as const;
+const generated = generatedFiles();
+
+export default defineConfig({
+  plugins: ["typescript", "react", "jsx-a11y", "import"],
+  jsPlugins: ["@shadcn/lint"],
+  categories: { correctness: "error" },
+  ignorePatterns: [
+    "node_modules",
+    "dist",
+    "build",
+    "coverage",
+    ".tanstack",
+    ".kodly*",
+  ],
+  env: { browser: true, node: true },
+  rules: {
+    ...typeRules,
+    "jsx-a11y/prefer-tag-over-role": "off",
+    "react/rules-of-hooks": "error",
+    "react/exhaustive-deps": "error",
+    "shadcn/no-restyle": ["error", { allow: ["layout"] }],
+    "shadcn/no-raw-colors": "error",
+    "shadcn/no-arbitrary-values": "error",
+    "shadcn/no-inline-styles": "error",
+    "shadcn/no-unknown-classes": "error",
+    "shadcn/require-static-classes": "error",
+  },
+  overrides: [
+    {
+      files: ["src/components/ui/**"],
+      rules: {
+        "shadcn/no-restyle": "off",
+        "shadcn/no-arbitrary-values": "off",
+        "shadcn/require-static-classes": "off",
+      },
+    },
+    // Only verified generator output gets type-rule exceptions. Handwritten SDK
+    // wrappers remain checked; parsing and the full TypeScript build cover both.
+    ...(generated.length
+      ? [
+          {
+            files: generated,
+            rules: {
+              ...Object.fromEntries(
+                Object.keys(typeRules).map((rule) => [rule, "off"] as const),
+              ),
+              "typescript/no-redundant-type-constituents": "off" as const,
+              "typescript/no-base-to-string": "off" as const,
+              "typescript/restrict-template-expressions": "off" as const,
+              "typescript/no-misused-spread": "off" as const,
+            },
+          },
+        ]
+      : []),
+  ],
+});

package/generators/app/templates/package.json

@@ -3,65 +3,79 @@
   "private": true,
   "type": "module",
   "version": "0.0.1",
-  "packageManager": "pnpm@10.28.2",
+  "packageManager": "pnpm@12.14.0",
   "scripts": {
-    "generate-routes": "tsr generate",
-    "watch-routes": "tsr watch",
-    "vite": "vite",
-    "vite:dev": "vite --mode dev",
-    "vite:sandbox": "vite --mode sandbox",
-    "dev": "npm-run-all --parallel watch-routes vite:dev",
-    "dev:sandbox": "npm-run-all --parallel watch-routes vite:sandbox",
-    "build": "pnpm run generate-routes && vite build --mode dev && tsc",
-    "build:sandbox": "pnpm run generate-routes && vite build --mode sandbox && tsc",
+    "dev": "vite --mode dev",
+    "dev:sandbox": "vite --mode sandbox",
+    "build": "vite build --mode dev && tsc --noEmit",
+    "build:sandbox": "vite build --mode sandbox && tsc --noEmit",
     "serve": "vite preview",
     "openapi-ts:dev": "MODE=dev openapi-ts",
-    "openapi-ts:sandbox": "MODE=sandbox openapi-ts"
+    "openapi-ts:sandbox": "MODE=sandbox openapi-ts",
+    "check": "pnpm run build && pnpm run lint && pnpm run lint:styles && pnpm run format:check && pnpm run check:duplicates && pnpm test",
+    "lint": "oxlint --type-aware --deny-warnings",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "check:duplicates": "node scripts/check-duplicates.mjs",
+    "test": "vitest run",
+    "lint:styles": "stylelint \"src/**/*.css\" --max-warnings 0",
+    "test:watch": "vitest"
   },
   "dependencies": {
-    "@hey-api/openapi-ts": "^0.92.3",
-    "@hookform/resolvers": "^5.2.2",
-    "@radix-ui/react-label": "^2.1.8",
-    "@radix-ui/react-select": "^2.2.6",
-    "@radix-ui/react-separator": "^1.1.8",
-    "@radix-ui/react-slot": "^1.2.4",
-    "@tanstack/react-query": "^5.90.20",
-    "@tanstack/react-router": "^1.158.1",
-    "@tanstack/router-plugin": "^1.158.1",
-    "axios": "^1.13.4",
-    "class-variance-authority": "^0.7.1",
-    "clsx": "^2.1.1",
-    "dotenv": "^17.2.4",
-    "i18next": "^25.8.4",
-    "jotai": "^2.17.1",
-    "lucide-react": "^0.563.0",
-    "react": "^19.2.4",
-    "react-dom": "^19.2.4",
-    "react-hook-form": "^7.71.1",
-    "react-i18next": "^16.5.4",
-    "sonner": "^2.0.7",
-    "tailwind-merge": "^3.4.0",
-    "tailwindcss-animate": "^1.0.7",
-    "tw-animate-css": "^1.4.0",
-    "zod": "^4.3.6"
+    "@hookform/resolvers": "6.0.0",
+    "@radix-ui/react-label": "2.1.17",
+    "@radix-ui/react-select": "2.4.1",
+    "@radix-ui/react-separator": "1.2.0",
+    "@radix-ui/react-slot": "1.5.0",
+    "@tanstack/react-query": "5.104.5",
+    "@tanstack/react-router": "1.170.45",
+    "axios": "1.20.0",
+    "class-variance-authority": "0.7.1",
+    "clsx": "2.1.1",
+    "i18next": "26.5.4",
+    "jotai": "3.0.1",
+    "lucide-react": "1.61.0",
+    "react": "19.3.1",
+    "react-dom": "19.3.1",
+    "react-hook-form": "7.90.0",
+    "react-i18next": "17.1.0",
+    "sonner": "2.0.8",
+    "tailwind-merge": "3.7.0",
+    "tw-animate-css": "1.4.0",
+    "zod": "4.6.7"
   },
   "devDependencies": {
-    "@tailwindcss/postcss": "^4.1.18",
-    "@tailwindcss/vite": "^4.1.18",
-    "@tanstack/router-cli": "^1.158.1",
-    "@types/node": "^25.2.1",
-    "@types/react": "^19.2.13",
-    "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^5.1.3",
-    "babel-plugin-react-compiler": "^1.0.0",
-    "npm-run-all": "^4.1.5",
-    "tailwindcss": "^4.1.18",
-    "typescript": "^5.9.3",
-    "vite": "^7.3.1"
+    "@tailwindcss/vite": "4.3.3",
+    "@types/node": "26.6.5",
+    "@types/react": "19.3.0",
+    "@types/react-dom": "19.3.0",
+    "@vitejs/plugin-react": "6.1.2",
+    "babel-plugin-react-compiler": "1.0.0",
+    "prettier": "3.9.10",
+    "tailwindcss": "4.3.3",
+    "typescript": "7.0.2",
+    "vite": "8.3.5",
+    "jscpd": "5.4.2",
+    "tsx": "4.23.15",
+    "oxlint": "1.89.0",
+    "oxlint-tsgolint": "7.0.2004",
+    "@shadcn/lint": "0.2.3",
+    "stylelint": "17.16.0",
+    "stylelint-config-standard": "40.0.0",
+    "stylelint-declaration-strict-value": "1.12.1",
+    "vitest": "5.0.5",
+    "@testing-library/react": "16.3.3",
+    "@testing-library/dom": "10.4.2",
+    "@testing-library/jest-dom": "7.0.1",
+    "@testing-library/user-event": "14.6.8",
+    "jsdom": "30.1.3",
+    "@hey-api/openapi-ts": "0.99.0",
+    "@tanstack/router-plugin": "1.168.47",
+    "dotenv": "18.0.8",
+    "@rolldown/plugin-babel": "0.2.4",
+    "@babel/core": "8.0.7"
   },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "esbuild"
-    ]
+  "engines": {
+    "node": ">=26.12.1"
   }
 }

package/generators/app/templates/pnpm-workspace.yaml

@@ -0,0 +1,19 @@
+# Verification never silently reinstalls or rewrites dependencies. Run pnpm install first.
+verifyDepsBeforeRun: error
+engineStrict: true
+saveExact: true
+allowBuilds:
+  esbuild: true
+minimumReleaseAgeExclude:
+  - i18next@26.5.4
+  - jscpd-darwin-arm64@5.4.2
+  - jscpd-darwin-x64@5.4.2
+  - jscpd-linux-arm64-gnu@5.4.2
+  - jscpd-linux-arm64-musl@5.4.2
+  - jscpd-linux-x64-gnu@5.4.2
+  - jscpd-linux-x64-musl@5.4.2
+  - jscpd-windows-arm64-msvc@5.4.2
+  - jscpd-windows-x64-msvc@5.4.2
+  - jscpd@5.4.2
+  - lucide-react@1.61.0
+  - vite@8.3.5