genesis-stack 1.0.6 → 1.0.7

package/README.md

@@ -21,8 +21,11 @@ genesis stack add --stack-package genesis-stack cpp
 genesis stack add --stack-package genesis-stack jskit jskit-mysql
 ```
 
-Genesis records `genesis-stack` in `genesis/stack.md`, so later commands and
-other hosts resolve the same catalog without another flag.
+Genesis records `genesis-stack` in `genesis/stack.md`, materializes the selected
+pieces' missing operation proposals as project-owned contracts, and returns a
+one-time preparation prompt. Later commands and other hosts resolve the same
+catalog without another flag, while catalog upgrades cannot silently rewrite
+the established project operations.
 
 The package contains static Markdown declarations only and has no framework
 dependencies. Genesis reads its manifest and Stack pieces; it never imports or

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "genesis-stack",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "The optional curated technology Stack catalog for Genesis projects.",
   "type": "module",
   "repository": {

package/stacks/pieces/cpp.md

@@ -12,6 +12,18 @@ C and C++ translation-unit, header, callable, ownership, build, and test convent
 
 - `cpp`
 
+## Guidance
+
+- Derive one smallest C or C++ lane from established product intent: an
+  executable, a reusable library, or both; the supported platform; and the
+  first observable behavior. Ask only unresolved product or interface
+  questions instead of presenting build systems and frameworks as product
+  choices.
+- Follow one build and test path selected by the request or existing source.
+  Read only the exact official guidance it requires; do not survey alternative
+  build systems, libraries, engines, or layouts unless a concrete failure
+  requires one exact investigation.
+
 ## Adoption
 
 - Identify the actual build system and presets, compiler and language level,

package/stacks/pieces/jskit-mysql.md

@@ -57,6 +57,13 @@ JSKIT MySQL runtime, live-schema CRUD generation, and persistence conventions.
   constraints safely, and invokes an app-owned idempotent seed. Do not execute
   it during adoption.
 
+## Guidance
+
+- Use the application-owned JSKIT database preparation command only after the
+  app implements it. Record that exact command in the project's Workspace
+  setup and Deployment contracts when database preparation is part of those
+  operations; do not copy a command that the application does not provide.
+
 ## Deslop
 
 - Use the installed JSKIT database runtime and generated resource/repository

package/stacks/pieces/jskit-postgresql.md

@@ -54,6 +54,13 @@ JSKIT PostgreSQL runtime, live-schema CRUD generation, and persistence conventio
   constraints safely, and invokes an app-owned idempotent seed. Do not execute
   it during adoption.
 
+## Guidance
+
+- Use the application-owned JSKIT database preparation command only after the
+  app implements it. Record that exact command in the project's Workspace
+  setup and Deployment contracts when database preparation is part of those
+  operations; do not copy a command that the application does not provide.
+
 ## Deslop
 
 - Use the installed JSKIT database runtime and generated resource/repository

package/stacks/pieces/jskit.md

@@ -12,10 +12,26 @@ https://mobily-enterprises.github.io/jskit-ai/
 
 ## Guidance
 
+- Derive one smallest JSKIT lane from established product intent instead of
+  asking the user to choose framework shape: a public page uses the minimal
+  foundation; navigation or settings uses the shell foundation; persistent
+  records add the matching database integration and one CRUD pattern;
+  login-required records use the shell, authentication, matching database
+  integration, and one CRUD pattern; and an administrative dashboard uses the
+  shell plus its relevant authenticated dashboard pattern. These are routing
+  examples, not substitutes for unresolved product, access, or data decisions.
 - Read the authoritative JSKIT framework guide at
-  `https://mobily-enterprises.github.io/jskit-ai/guide/` and select the narrow
-  relevant source pattern from
-  `https://mobily-enterprises.github.io/jskit-ai/patterns/` before implementing.
+  `https://mobily-enterprises.github.io/jskit-ai/guide/` and only the foundation
+  and next source pattern required by that lane from
+  `https://mobily-enterprises.github.io/jskit-ai/patterns/`. Do not compare every
+  foundation, clone the whole framework repository, inspect unrelated package
+  internals, or delegate research unless a concrete failure requires one exact
+  investigation.
+- When local authentication is selected, ask whether the relevant application
+  surfaces are public or login-required and expose
+  `AUTH_LOCAL_SESSION_SECRET` as a required environment name in the project's
+  established environment contract and committed environment example. Never
+  commit or invent its value.
 - Before creating or modifying JSKIT Vue/Vuetify UI, read the Material 3
   contract at
   `https://mobily-enterprises.github.io/jskit-ai/guide/framework/material-3`
@@ -38,7 +54,7 @@ https://mobily-enterprises.github.io/jskit-ai/
   composition, package-owned migrations, explicit repositories/features/named
   actions, and current client resources without running a broad package update.
 - Compare the real package scripts with JSKIT's current Workspace setup,
-  Launch, verification, and consumer-owned Deployment proposal. Genesis keeps
+  Outputs, Verification, and consumer-owned Deployment proposal. Genesis keeps
   that extra section opaque; the deployment consumer validates it. Older source
   needs a complete project-owned override until a separately approved port
   supplies the current commands.
@@ -47,7 +63,7 @@ https://mobily-enterprises.github.io/jskit-ai/
   component when the script or preparation file does not exist.
 - When authenticated Preview exists, preserve the app-owned Preview identity
   command, selectors, protocol, environment names, runtime, and timeout in the
-  project's Launch declaration. A host-saved identity name/value is not a
+  project's Outputs declaration. A host-saved identity name/value is not a
   substitute for this application contract.
 - Treat generator descriptors, receipts, sync commands, legacy service
   locators, and retired tool manifests as migration evidence only. Translate
@@ -57,7 +73,6 @@ https://mobily-enterprises.github.io/jskit-ai/
 ## Workspace setup
 
 - Prepare `Install dependencies` with `nodejs` when `package.json` exists: `npm` `install`
-- Prepare `Prepare database` with `nodejs` if `scripts/prepare-database.js` exists: `npm` `run` `db:prepare`
 
 ## Environment files
 
@@ -97,7 +112,6 @@ https://mobily-enterprises.github.io/jskit-ai/
 - Ready when: `GET` `/api/health` returns `200`
 - Prepare `Install dependencies`: `npm` `ci`
 - Build `Build`: `npm` `run` `build`
-- Migrate `Prepare database`: `npm` `run` `db:prepare`
 - Serve `Start`: `npm` `start`
 
 ## Deslop

package/stacks/pieces/laravel-mysql.md

@@ -0,0 +1,63 @@
+# Stack piece: laravel-mysql
+
+## Description
+
+Laravel MySQL connection, migration, Eloquent, and database environment conventions.
+
+## Requires
+
+- `laravel`
+- `mysql`
+
+## Conflicts
+
+- `laravel-postgresql`
+
+## Environment defaults
+
+- Default `DB_CONNECTION`: `mysql`
+- Default `DB_HOST`: `127.0.0.1`
+- Default `DB_PORT`: `3306`
+- Default `DB_DATABASE`: `laravel`
+- Default `DB_USERNAME`: `root`
+
+## Resources
+
+```json genesis-resource
+{
+  "id": "database",
+  "kind": "mysql",
+  "environmentAlternatives": [
+    {
+      "bindings": {
+        "database": "DB_DATABASE",
+        "host": "DB_HOST",
+        "password": "DB_PASSWORD",
+        "port": "DB_PORT",
+        "username": "DB_USERNAME"
+      },
+      "allowEmpty": ["password"],
+      "preferred": true
+    },
+    {
+      "bindings": {
+        "url": "DB_URL"
+      }
+    }
+  ]
+}
+```
+
+## Guidance
+
+- Use Laravel's application-owned migrations and seeders. Add the exact
+  `php artisan migrate` or production `php artisan migrate --force` operation
+  to the applicable project contract only when that consumer owns executing it.
+- Keep the project Resource contract aligned with `config/database.php` if the
+  application deliberately changes Laravel's conventional environment names.
+
+## Adoption
+
+- Confirm the selected connection, URL alternative, individual `DB_*` names,
+  migrations, seeders, and production migration ownership from source before
+  declaring readiness or connecting to the database.

package/stacks/pieces/laravel-postgresql.md

@@ -0,0 +1,63 @@
+# Stack piece: laravel-postgresql
+
+## Description
+
+Laravel PostgreSQL connection, migration, Eloquent, and database environment conventions.
+
+## Requires
+
+- `laravel`
+- `postgresql`
+
+## Conflicts
+
+- `laravel-mysql`
+
+## Environment defaults
+
+- Default `DB_CONNECTION`: `pgsql`
+- Default `DB_HOST`: `127.0.0.1`
+- Default `DB_PORT`: `5432`
+- Default `DB_DATABASE`: `laravel`
+- Default `DB_USERNAME`: `postgres`
+
+## Resources
+
+```json genesis-resource
+{
+  "id": "database",
+  "kind": "postgresql",
+  "environmentAlternatives": [
+    {
+      "bindings": {
+        "database": "DB_DATABASE",
+        "host": "DB_HOST",
+        "password": "DB_PASSWORD",
+        "port": "DB_PORT",
+        "username": "DB_USERNAME"
+      },
+      "allowEmpty": ["password"],
+      "preferred": true
+    },
+    {
+      "bindings": {
+        "url": "DB_URL"
+      }
+    }
+  ]
+}
+```
+
+## Guidance
+
+- Use Laravel's application-owned migrations and seeders. Add the exact
+  `php artisan migrate` or production `php artisan migrate --force` operation
+  to the applicable project contract only when that consumer owns executing it.
+- Keep the project Resource contract aligned with `config/database.php` if the
+  application deliberately changes Laravel's conventional environment names.
+
+## Adoption
+
+- Confirm the selected connection, URL alternative, individual `DB_*` names,
+  migrations, seeders, and production migration ownership from source before
+  declaring readiness or connecting to the database.

package/stacks/pieces/laravel.md

@@ -0,0 +1,73 @@
+# Stack piece: laravel
+
+## Description
+
+Laravel application, Artisan, Composer, Vite, HTTP, and framework lifecycle
+conventions. Authoritative framework documentation: https://laravel.com/docs/
+
+## Requires
+
+- `php`
+- `nodejs`
+
+## Guidance
+
+- Use the Laravel version selected by the application and follow its matching
+  official documentation. Preserve Laravel's application container, service
+  providers, Eloquent models, validation, authorization, queues, events, and
+  Artisan conventions instead of adding parallel framework plumbing.
+- Treat `.env.example` as names and safe examples only. Keep actual `.env`
+  values and secrets outside Git.
+- Use Laravel's built-in `/up` health route unless the application deliberately
+  changes it and updates its project Outputs contract.
+
+## Adoption
+
+- Inspect `composer.lock`, `composer.json`, `artisan`, `bootstrap/app.php`,
+  `package.json`, and the application's real environment names before changing
+  its project contracts. Preserve its Laravel major version and frontend tool.
+- Record actual Composer and frontend installation, test, build, development,
+  queue, scheduler, migration, and production operations. Do not assume the
+  catalog proposal matches an older application.
+- When the app uses MySQL or PostgreSQL, select the matching Laravel database
+  integration so its conventional environment names become explicit.
+
+## Environment files
+
+- Dotenv `.env`
+
+## Workspace setup
+
+- Prepare `Install PHP dependencies` with `php` when `composer.json` exists: `composer` `install` `--no-interaction`
+- Prepare `Install frontend dependencies` with `nodejs` when `package.json` exists: `npm` `install`
+- Prepare `Build frontend assets` with `nodejs` when `package.json` exists: `npm` `run` `build`
+
+## Outputs
+
+### Target `app`: Run Laravel app
+
+- Default.
+- Mode: `interactive`
+- Runtimes: `php`
+- Run `Develop`: `php` `artisan` `serve` `--host` `{host}` `--port` `{port}`
+
+#### Presentation
+
+- Kind: `web`
+- Preferred port: `8000`
+- URL path: `/`
+- Ready when: `GET` `/up` returns `200`
+
+## Verification
+
+- Verify `application`: `php` `artisan` `test`
+
+## Deslop
+
+- Preserve Laravel's container, providers, middleware, policies, requests,
+  resources, jobs, events, Eloquent relationships, and Artisan ownership.
+- Keep validation and authorization at established Laravel boundaries. Remove
+  facades, helpers, repositories, or service wrappers only when they duplicate
+  framework behavior without protecting a real application seam.
+- Preserve migration history and model/database behavior; cleanup is not
+  permission for destructive schema changes or mass-assignment drift.

package/stacks/pieces/nodejs.md

@@ -21,7 +21,7 @@ Node.js package, command, module, dependency, and test conventions.
   development, and production commands. Do not assume `npm run develop`,
   `npm test`, or `npm start` exists merely because a current foundation uses it.
 - Identify every long-running process, its workdir, host/port handling,
-  readiness signal, and shutdown ownership before declaring Launch.
+  readiness signal, and shutdown ownership before declaring Outputs.
 
 ## Deslop