quik-cli 1.0.0

package/bin/quik.dev.ts

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+
+import { CLI } from "../src/index.js";
+
+const cli = new CLI();
+cli.run(process.argv).catch(() => {
+  // Error already logged by CLI handler — exit silently
+});

package/bin/quik.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+
+import { CLI } from "../dist/index.js";
+
+const cli = new CLI();
+cli.run(process.argv).catch((err) => {
+  console.error("Fatal error:", err);
+  process.exit(1);
+});

package/dist/commands/VersionCommand.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from "../core/BaseCommand.js";
+import type { CommandContext } from "../types/index.js";
+export declare class VersionCommand extends BaseCommand {
+    readonly meta: {
+        name: string;
+        description: string;
+        aliases: string[];
+        category: string;
+    };
+    execute(context: CommandContext): void;
+}
+//# sourceMappingURL=VersionCommand.d.ts.map

package/dist/commands/VersionCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VersionCommand.d.ts","sourceRoot":"","sources":["../../src/commands/VersionCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,qBAAa,cAAe,SAAQ,WAAW;IAC7C,QAAQ,CAAC,IAAI;;;;;MAKX;IAEF,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;CAGvC"}

package/dist/commands/VersionCommand.js

@@ -0,0 +1,13 @@
+import { BaseCommand } from "../core/BaseCommand.js";
+export class VersionCommand extends BaseCommand {
+    meta = {
+        name: "version",
+        description: "Show version information",
+        aliases: ["v", "--version"],
+        category: "general",
+    };
+    execute(context) {
+        context.logger.info("quik-cli v1.0.0");
+    }
+}
+//# sourceMappingURL=VersionCommand.js.map

package/dist/commands/VersionCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VersionCommand.js","sourceRoot":"","sources":["../../src/commands/VersionCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,OAAO,cAAe,SAAQ,WAAW;IACpC,IAAI,GAAG;QACd,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,CAAC;QAC3B,QAAQ,EAAE,SAAS;KACpB,CAAC;IAEF,OAAO,CAAC,OAAuB;QAC7B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/commands/init/InitCommand.d.ts

@@ -0,0 +1,21 @@
+import { BaseCommand } from "../../core/BaseCommand.js";
+import type { CommandContext } from "../../types/index.js";
+/**
+ * `quik init` — interactively scaffolds a new quik project.
+ * Asks for project name, API key, and framework, then creates folder structure.
+ */
+export declare class InitCommand extends BaseCommand {
+    readonly meta: {
+        name: string;
+        description: string;
+        args: string;
+        aliases: string[];
+        category: string;
+        options: {
+            flag: string;
+            description: string;
+        }[];
+    };
+    execute(context: CommandContext): Promise<void>;
+}
+//# sourceMappingURL=InitCommand.d.ts.map

package/dist/commands/init/InitCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InitCommand.d.ts","sourceRoot":"","sources":["../../../src/commands/init/InitCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;GAGG;AACH,qBAAa,WAAY,SAAQ,WAAW;IAC1C,QAAQ,CAAC,IAAI;;;;;;;;;;MASX;IAEI,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CAItD"}

package/dist/commands/init/InitCommand.js

@@ -0,0 +1,22 @@
+import { BaseCommand } from "../../core/BaseCommand.js";
+/**
+ * `quik init` — interactively scaffolds a new quik project.
+ * Asks for project name, API key, and framework, then creates folder structure.
+ */
+export class InitCommand extends BaseCommand {
+    meta = {
+        name: "init",
+        description: "interactively scaffold a new quik project",
+        args: "[project-name]",
+        aliases: ["i"],
+        category: "setup",
+        options: [
+            { flag: "-y, --yes", description: "accept defaults without prompting" },
+        ],
+    };
+    async execute(context) {
+        const { executeInit } = await import("./impl/init.impl.js");
+        await executeInit(context);
+    }
+}
+//# sourceMappingURL=InitCommand.js.map

package/dist/commands/init/InitCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InitCommand.js","sourceRoot":"","sources":["../../../src/commands/init/InitCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAGxD;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,WAAW;IACjC,IAAI,GAAG;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2CAA2C;QACxD,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,CAAC,GAAG,CAAC;QACd,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,mCAAmC,EAAE;SACxE;KACF,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC5D,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/commands/init/impl/astro.scaffold.d.ts

@@ -0,0 +1,9 @@
+interface EnvVars {
+    secretKey: string;
+    tenantSlug: string;
+    tenantApiKey: string;
+    apiBaseUrl: string;
+}
+export declare function scaffoldAstro(projectPath: string, env: EnvVars): Promise<void>;
+export {};
+//# sourceMappingURL=astro.scaffold.d.ts.map

package/dist/commands/init/impl/astro.scaffold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"astro.scaffold.d.ts","sourceRoot":"","sources":["../../../../src/commands/init/impl/astro.scaffold.ts"],"names":[],"mappings":"AASA,UAAU,OAAO;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CA8Bf"}

package/dist/commands/init/impl/astro.scaffold.js

@@ -0,0 +1,23 @@
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { mkdir } from "node:fs/promises";
+import { renderToFile } from "../../../core/TemplateRenderer.js";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const TEMPLATES_DIR = join(__dirname, "../templates");
+export async function scaffoldAstro(projectPath, env) {
+    // Create .env from template
+    await renderToFile(join(TEMPLATES_DIR, "astro/env.template"), join(projectPath, ".env"), {
+        TENANT_SLUG: env.tenantSlug,
+        TENANT_API_KEY: env.tenantApiKey,
+        API_BASE_URL: env.apiBaseUrl,
+        SECRET_KEY: env.secretKey,
+    });
+    // Create src/pages/[...slug].astro
+    await mkdir(join(projectPath, "src/pages"), { recursive: true });
+    await renderToFile(join(TEMPLATES_DIR, "astro/page.template"), join(projectPath, "src/pages/[...slug].astro"), {});
+    // Create src/pages/api/[...path].ts
+    await mkdir(join(projectPath, "src/pages/api"), { recursive: true });
+    await renderToFile(join(TEMPLATES_DIR, "astro/api-proxy.template"), join(projectPath, "src/pages/api/[...path].ts"), {});
+}
+//# sourceMappingURL=astro.scaffold.js.map

package/dist/commands/init/impl/astro.scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"astro.scaffold.js","sourceRoot":"","sources":["../../../../src/commands/init/impl/astro.scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAStD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,GAAY;IAEZ,4BAA4B;IAC5B,MAAM,YAAY,CAChB,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,EACzC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EACzB;QACE,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,cAAc,EAAE,GAAG,CAAC,YAAY;QAChC,YAAY,EAAE,GAAG,CAAC,UAAU;QAC5B,UAAU,EAAE,GAAG,CAAC,SAAS;KAC1B,CACF,CAAC;IAEF,mCAAmC;IACnC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjE,MAAM,YAAY,CAChB,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,EAC1C,IAAI,CAAC,WAAW,EAAE,2BAA2B,CAAC,EAC9C,EAAE,CACH,CAAC;IAEF,oCAAoC;IACpC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,MAAM,YAAY,CAChB,IAAI,CAAC,aAAa,EAAE,0BAA0B,CAAC,EAC/C,IAAI,CAAC,WAAW,EAAE,4BAA4B,CAAC,EAC/C,EAAE,CACH,CAAC;AACJ,CAAC"}

package/dist/commands/init/impl/init.impl.d.ts

@@ -0,0 +1,3 @@
+import type { CommandContext } from "../../../types/index.js";
+export declare function executeInit(context: CommandContext): Promise<void>;
+//# sourceMappingURL=init.impl.d.ts.map

package/dist/commands/init/impl/init.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.impl.d.ts","sourceRoot":"","sources":["../../../../src/commands/init/impl/init.impl.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAyE9D,wBAAsB,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkLxE"}

package/dist/commands/init/impl/init.impl.js

@@ -0,0 +1,201 @@
+import enquirer from "enquirer";
+import { spawn } from "node:child_process";
+import { writeFile, mkdir, rm, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { randomBytes } from "node:crypto";
+import { QuikError, ErrorCode } from "../../../core/QuikError.js";
+import { loader } from "../../../core/Loader.js";
+import { installGitHubPackage } from "../../../utils/PackageInstaller.js";
+import { scaffoldNextjs } from "./nextjs.scaffold.js";
+import { scaffoldAstro } from "./astro.scaffold.js";
+const { prompt } = enquirer;
+const GITHUB_PACKAGE = `@quikcr/quik-engine`;
+/**
+ * Generates a secret key for AES-256 encryption.
+ */
+function generateSecretKey() {
+    return randomBytes(32).toString("base64");
+}
+/**
+ * Fetches a GitHub token from an external API using the user's API key.
+ */
+async function fetchGitHubToken(apiKey) {
+    let response;
+    try {
+        response = await fetch("http://localhost:3000/github-token", {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ apiKey }),
+        });
+    }
+    catch (err) {
+        throw new QuikError(ErrorCode.NET_001, "network", `Network error: Unable to reach token API`, { cause: err instanceof Error ? err.message : String(err) });
+    }
+    if (!response.ok) {
+        throw new QuikError(ErrorCode.NET_001, "network", `Failed to fetch GitHub token: ${response.statusText}`, { details: { status: response.status, apiKeyPrefix: apiKey.slice(0, 8) + "..." } });
+    }
+    const data = (await response.json());
+    return data.token;
+}
+function runNpmInstall(cwd) {
+    return new Promise((resolve, reject) => {
+        const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";
+        const child = spawn(npmCmd, ["install"], {
+            cwd,
+            stdio: "inherit",
+            shell: process.platform === "win32",
+            windowsHide: true,
+        });
+        child.on("error", (err) => reject(err));
+        child.on("close", (code) => {
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error(`npm install exited with code ${code}`));
+        });
+    });
+}
+export async function executeInit(context) {
+    const useDefaults = Boolean(context.options.yes);
+    const projectNameArg = context.args[0];
+    // Determine if in-place mode (no project name given)
+    const inPlace = !projectNameArg;
+    // In-place mode requires cwd to already be a project with package.json
+    if (inPlace) {
+        try {
+            await readFile(join(context.cwd, "package.json"), "utf-8");
+        }
+        catch {
+            throw new QuikError(ErrorCode.INIT_001, "init", "No package.json found. Run 'quik init <project-name>' to create a new project.");
+        }
+    }
+    const answers = useDefaults
+        ? {
+            projectName: projectNameArg ?? "my-quik-app",
+            tenantSlug: "",
+            tenantApiKey: "",
+            apiBaseUrl: "",
+            framework: "nextjs",
+        }
+        : await prompt([
+            ...(inPlace
+                ? []
+                : [
+                    {
+                        type: "input",
+                        name: "projectName",
+                        message: "What is your project name?",
+                        initial: projectNameArg ?? "my-quik-app",
+                    },
+                ]),
+            {
+                type: "input",
+                name: "tenantSlug",
+                message: "Enter your tenant slug:",
+            },
+            {
+                type: "input",
+                name: "tenantApiKey",
+                message: "Enter your tenant API key:",
+            },
+            {
+                type: "input",
+                name: "apiBaseUrl",
+                message: "Enter your API base URL:",
+            },
+            {
+                type: "select",
+                name: "framework",
+                message: "Which framework are you using?",
+                choices: ["nextjs", "astro", "remix", "none"],
+                initial: 0,
+            },
+        ]);
+    // Set projectName from answers or default for new project
+    const projectName = answers.projectName || "my-quik-app";
+    const projectPath = inPlace ? context.cwd : join(context.cwd, projectName);
+    // Create project folder only for new (non-in-place) projects
+    if (!inPlace) {
+        await mkdir(projectPath, { recursive: true });
+    }
+    const minDisplayMs = 1500;
+    const startTime = Date.now();
+    try {
+        loader.start("Creating project files", "creating");
+        const secretKey = generateSecretKey();
+        if (!inPlace) {
+            // Write package.json for new projects
+            const packageJson = {
+                name: projectName,
+                version: "0.1.0",
+                type: "module",
+                scripts: {
+                    dev: "quik dev",
+                    build: "quik build",
+                },
+                dependencies: {
+                    [GITHUB_PACKAGE]: "^1.0.29",
+                },
+            };
+            await loader.stepFor("Configuring package.json", "creating");
+            await writeFile(join(projectPath, "package.json"), JSON.stringify(packageJson, null, 2), "utf-8");
+        }
+        // Fetch GitHub token and install private package
+        await loader.stepFor("Authenticating with GitHub registry", "webrequest");
+        const githubToken = await fetchGitHubToken(answers.tenantApiKey);
+        await loader.stepFor("Installing quik-engine", "installing", 2000, () => installGitHubPackage("@quikcr/quik-engine", "1.0.29", githubToken, projectPath));
+        if (!inPlace) {
+            // Run npm install only for new projects (existing projects already have node_modules)
+            await loader.stepFor("Installing dependencies", "installing", 2000, () => runNpmInstall(projectPath));
+        }
+        // Framework-specific scaffolding
+        if (answers.framework === "nextjs") {
+            await loader.stepFor("Scaffolding Next.js files", "creating");
+            await scaffoldNextjs(projectPath, {
+                secretKey,
+                tenantSlug: answers.tenantSlug,
+                tenantApiKey: answers.tenantApiKey,
+                apiBaseUrl: answers.apiBaseUrl,
+            });
+        }
+        else if (answers.framework === "astro") {
+            await loader.stepFor("Scaffolding Astro files", "creating");
+            await scaffoldAstro(projectPath, {
+                secretKey,
+                tenantSlug: answers.tenantSlug,
+                tenantApiKey: answers.tenantApiKey,
+                apiBaseUrl: answers.apiBaseUrl,
+            });
+        }
+        // Ensure loader was visible for at least 1.5s
+        const elapsed = Date.now() - startTime;
+        if (elapsed < minDisplayMs) {
+            await new Promise((resolve) => setTimeout(resolve, minDisplayMs - elapsed));
+        }
+        if (inPlace) {
+            loader.done("Quik setup complete!");
+            context.logger.success(".env configured");
+            context.logger.success("Quik engine installed");
+            context.logger.info(`Framework: ${answers.framework}`);
+        }
+        else {
+            loader.done(`Project ${projectName} initialized successfully!`);
+            context.logger.success(`Created ${projectName}/`);
+            context.logger.success(`Created ${projectName}/.env`);
+            context.logger.success(`Created ${projectName}/.npmrc`);
+            context.logger.success(`Created ${projectName}/package.json`);
+            context.logger.info(`Framework: ${answers.framework}`);
+        }
+    }
+    catch (error) {
+        if (!inPlace) {
+            // Rollback: remove project folder on failure (only for new projects)
+            await loader.stepFor("Cleaning up...", "deleting", 2000, async () => {
+                await rm(projectPath, { recursive: true, force: true });
+            });
+        }
+        loader.fail("Failed to initialize project");
+        throw error;
+    }
+}
+//# sourceMappingURL=init.impl.js.map

package/dist/commands/init/impl/init.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.impl.js","sourceRoot":"","sources":["../../../../src/commands/init/impl/init.impl.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;AAU5B,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C;;GAEG;AACH,SAAS,iBAAiB;IACxB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,MAAc;IAC5C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,oCAAoC,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CACjB,SAAS,CAAC,OAAO,EACjB,SAAS,EACT,0CAA0C,EAC1C,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,SAAS,CACjB,SAAS,CAAC,OAAO,EACjB,SAAS,EACT,iCAAiC,QAAQ,CAAC,UAAU,EAAE,EACtD,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,EAAE,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAChE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE;YACvC,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACnC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAuB;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEvC,qDAAqD;IACrD,MAAM,OAAO,GAAG,CAAC,cAAc,CAAC;IAEhC,uEAAuE;IACvE,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CACjB,SAAS,CAAC,QAAQ,EAClB,MAAM,EACN,gFAAgF,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAgB,WAAW;QACtC,CAAC,CAAC;YACE,WAAW,EAAE,cAAc,IAAI,aAAa;YAC5C,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,QAAQ;SACpB;QACH,CAAC,CAAC,MAAM,MAAM,CAAc;YACxB,GAAG,CAAC,OAAO;gBACT,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,IAAI,EAAE,OAAgB;wBACtB,IAAI,EAAE,aAAsB;wBAC5B,OAAO,EAAE,4BAA4B;wBACrC,OAAO,EAAE,cAAc,IAAI,aAAa;qBACzC;iBACF,CAAC;YACN;gBACE,IAAI,EAAE,OAAgB;gBACtB,IAAI,EAAE,YAAqB;gBAC3B,OAAO,EAAE,yBAAyB;aACnC;YACD;gBACE,IAAI,EAAE,OAAgB;gBACtB,IAAI,EAAE,cAAuB;gBAC7B,OAAO,EAAE,4BAA4B;aACtC;YACD;gBACE,IAAI,EAAE,OAAgB;gBACtB,IAAI,EAAE,YAAqB;gBAC3B,OAAO,EAAE,0BAA0B;aACpC;YACD;gBACE,IAAI,EAAE,QAAiB;gBACvB,IAAI,EAAE,WAAoB;gBAC1B,OAAO,EAAE,gCAAgC;gBACzC,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAU;gBACtD,OAAO,EAAE,CAAC;aACX;SACF,CAAC,CAAC;IAEP,0DAA0D;IAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,aAAa,CAAC;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAE3E,6DAA6D;IAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC;QAEnD,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QAEtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,sCAAsC;YACtC,MAAM,WAAW,GAAG;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE;oBACP,GAAG,EAAE,UAAU;oBACf,KAAK,EAAE,YAAY;iBACpB;gBACD,YAAY,EAAE;oBACZ,CAAC,cAAc,CAAC,EAAE,SAAS;iBAC5B;aACF,CAAC;YAEF,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;YAC7D,MAAM,SAAS,CACb,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EACjC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EACpC,OAAO,CACR,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,MAAM,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE,YAAY,CAAC,CAAC;QAC1E,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEjE,MAAM,MAAM,CAAC,OAAO,CAClB,wBAAwB,EACxB,YAAY,EACZ,IAAI,EACJ,GAAG,EAAE,CACH,oBAAoB,CAClB,qBAAqB,EACrB,QAAQ,EACR,WAAW,EACX,WAAW,CACZ,CACJ,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,sFAAsF;YACtF,MAAM,MAAM,CAAC,OAAO,CAClB,yBAAyB,EACzB,YAAY,EACZ,IAAI,EACJ,GAAG,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,CACjC,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,cAAc,CAAC,WAAW,EAAE;gBAChC,SAAS;gBACT,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,UAAU,CAAC,CAAC;YAC5D,MAAM,aAAa,CAAC,WAAW,EAAE;gBAC/B,SAAS;gBACT,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,8CAA8C;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,IAAI,OAAO,GAAG,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC1C,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;YAChD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,WAAW,WAAW,4BAA4B,CAAC,CAAC;YAChE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,WAAW,GAAG,CAAC,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,WAAW,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,WAAW,SAAS,CAAC,CAAC;YACxD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,WAAW,eAAe,CAAC,CAAC;YAC9D,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,qEAAqE;YACrE,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;gBAClE,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/commands/init/impl/nextjs.scaffold.d.ts

@@ -0,0 +1,9 @@
+interface EnvVars {
+    secretKey: string;
+    tenantSlug: string;
+    tenantApiKey: string;
+    apiBaseUrl: string;
+}
+export declare function scaffoldNextjs(projectPath: string, env: EnvVars): Promise<void>;
+export {};
+//# sourceMappingURL=nextjs.scaffold.d.ts.map

package/dist/commands/init/impl/nextjs.scaffold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.scaffold.d.ts","sourceRoot":"","sources":["../../../../src/commands/init/impl/nextjs.scaffold.ts"],"names":[],"mappings":"AASA,UAAU,OAAO;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CA8Cf"}

package/dist/commands/init/impl/nextjs.scaffold.js

@@ -0,0 +1,29 @@
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { mkdir } from "node:fs/promises";
+import { renderToFile } from "../../../core/TemplateRenderer.js";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const TEMPLATES_DIR = join(__dirname, "../templates");
+export async function scaffoldNextjs(projectPath, env) {
+    // Create .env from template
+    await renderToFile(join(TEMPLATES_DIR, "nextjs/env.template"), join(projectPath, ".env"), {
+        TENANT_SLUG: env.tenantSlug,
+        TENANT_API_KEY: env.tenantApiKey,
+        API_BASE_URL: env.apiBaseUrl,
+        SECRET_KEY: env.secretKey,
+    });
+    // Create src/layout.tsx
+    await renderToFile(join(TEMPLATES_DIR, "nextjs/layout.template"), join(projectPath, "src/app/layout.tsx"), {});
+    // Create src/app/[...slug] directory
+    await mkdir(join(projectPath, "src/app/[...slug]"), { recursive: true });
+    // Create the catch-all page
+    await renderToFile(join(TEMPLATES_DIR, "nextjs/page.template"), join(projectPath, "src/app/[...slug]/page.tsx"), {});
+    // Create src/app/api/[...path] directory
+    await mkdir(join(projectPath, "src/app/api/[...path]"), { recursive: true });
+    // Create the API proxy route
+    await renderToFile(join(TEMPLATES_DIR, "nextjs/api-proxy.template"), join(projectPath, "src/app/api/[...path]/route.ts"), {});
+    // Create nextjs config
+    await renderToFile(join(TEMPLATES_DIR, "nextjs/config.template"), join(projectPath, "next.config.ts"), {});
+}
+//# sourceMappingURL=nextjs.scaffold.js.map

package/dist/commands/init/impl/nextjs.scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.scaffold.js","sourceRoot":"","sources":["../../../../src/commands/init/impl/nextjs.scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAStD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,GAAY;IAEZ,4BAA4B;IAC5B,MAAM,YAAY,CAChB,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,EAC1C,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EACzB;QACE,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,cAAc,EAAE,GAAG,CAAC,YAAY;QAChC,YAAY,EAAE,GAAG,CAAC,UAAU;QAC5B,UAAU,EAAE,GAAG,CAAC,SAAS;KAC1B,CACF,CAAC;IAEF,wBAAwB;IACxB,MAAM,YAAY,CAChB,IAAI,CAAC,aAAa,EAAE,wBAAwB,CAAC,EAC7C,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,EACvC,EAAE,CACH,CAAC;IAEF,qCAAqC;IACrC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzE,4BAA4B;IAC5B,MAAM,YAAY,CAChB,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,EAC3C,IAAI,CAAC,WAAW,EAAE,4BAA4B,CAAC,EAC/C,EAAE,CACH,CAAC;IAEF,yCAAyC;IACzC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7E,6BAA6B;IAC7B,MAAM,YAAY,CAChB,IAAI,CAAC,aAAa,EAAE,2BAA2B,CAAC,EAChD,IAAI,CAAC,WAAW,EAAE,gCAAgC,CAAC,EACnD,EAAE,CACH,CAAC;IAEA,uBAAuB;IACzB,MAAM,YAAY,CAChB,IAAI,CAAC,aAAa,EAAE,wBAAwB,CAAC,EAC7C,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EACnC,EAAE,CACH,CAAC;AACJ,CAAC"}

package/dist/commands/init/templates/astro/.env.template

@@ -0,0 +1,23 @@
+# Host runtime configuration.
+# Variables prefixed with NEXT_PUBLIC_ are exposed to the browser by Next.js;
+# the package's `<QuikConfigProvider>` reads them on the client.
+# Variables without the prefix are server-only — the proxy route reads
+# `PROXY_ENCRYPTION_KEY` from this file.
+
+# Tenant identity forwarded to the package's transport layer.
+NEXT_PUBLIC_TENANT_SLUG={{TENANT_SLUG}}
+NEXT_PUBLIC_TENANT_API_KEY={{TENANT_API_KEY}}
+
+# Where the package's `apiFetch` sends requests. The host decides where
+# to mount the package's API proxy (or whether to point at the backend
+# directly). This value flows through `<QuikConfigProvider apiBaseUrl=...>`
+# into `apiFetch`. The package's internal `QUIK_API_BASE_URL` constant
+# (in `src/lib/transport/api-config.ts`) acts as a fallback if this is
+# unset.
+NEXT_PUBLIC_API_BASE_URL={{API_BASE_URL}}
+
+# E2E encryption (AES-256-GCM). Both keys must hold the same 32-byte
+# base64-encoded secret for the round-trip to work. With either key
+# absent, requests pass through as plain JSON.
+PROXY_ENCRYPTION_KEY={{SECRET_KEY}}
+NEXT_PUBLIC_ENCRYPTION_KEY={{SECRET_KEY}}

package/dist/commands/init/templates/astro/api-proxy.template

@@ -0,0 +1,8 @@
+import type { APIRoute } from 'astro';
+import { createProxyHandler } from '@qwik/shared';
+
+// BE server URL - server-side only, never reaches the browser
+const BE_URL = import.meta.env.APP_BASE_URL || 'http://localhost:3001';
+const ENCRYPTION_KEY = import.meta.env.PROXY_ENCRYPTION_KEY;
+
+export const ALL: APIRoute = (ctx) => createProxyHandler({ baseUrl: BE_URL, encryptionKey: ENCRYPTION_KEY })(ctx.request, { path: ctx.params.path as string | string[] });

package/dist/commands/init/templates/astro/env.template

@@ -0,0 +1,23 @@
+# Host runtime configuration.
+# Variables prefixed with NEXT_PUBLIC_ are exposed to the browser by Next.js;
+# the package's `<QuikConfigProvider>` reads them on the client.
+# Variables without the prefix are server-only — the proxy route reads
+# `PROXY_ENCRYPTION_KEY` from this file.
+
+# Tenant identity forwarded to the package's transport layer.
+NEXT_PUBLIC_TENANT_SLUG={{TENANT_SLUG}}
+NEXT_PUBLIC_TENANT_API_KEY={{TENANT_API_KEY}}
+
+# Where the package's `apiFetch` sends requests. The host decides where
+# to mount the package's API proxy (or whether to point at the backend
+# directly). This value flows through `<QuikConfigProvider apiBaseUrl=...>`
+# into `apiFetch`. The package's internal `QUIK_API_BASE_URL` constant
+# (in `src/lib/transport/api-config.ts`) acts as a fallback if this is
+# unset.
+NEXT_PUBLIC_API_BASE_URL={{API_BASE_URL}}
+
+# E2E encryption (AES-256-GCM). Both keys must hold the same 32-byte
+# base64-encoded secret for the round-trip to work. With either key
+# absent, requests pass through as plain JSON.
+PROXY_ENCRYPTION_KEY={{SECRET_KEY}}
+NEXT_PUBLIC_ENCRYPTION_KEY={{SECRET_KEY}}

package/dist/commands/init/templates/astro/page.template

@@ -0,0 +1,14 @@
+---
+import Layout from '../../layouts/Layout.astro';
+import QwikEngine from '@qwik/engine';
+
+const { slug } = Astro.params;
+const currentPath = `/admin/${slug || ''}`;
+// Astro [...slug] gives us "erm/financial" as a string, split to get array
+const slugArray = slug ? slug.split('/') : [];
+const params = { slug: slugArray };
+---
+
+<Layout>
+  <QwikEngine params={params} currentPath={currentPath} client:load />
+</Layout>

package/dist/commands/init/templates/nextjs/api-proxy.template

@@ -0,0 +1,25 @@
+import { createProxyHandler } from "@quikcr/quik-engine";
+import type { NextRequest } from "next/server";
+
+// The proxy's upstream backend URL is owned by the package —
+// `createProxyHandler` reads it from the internal QUIK_BACKEND_API_URL
+// constant. Hosts do not need to configure or pass it.
+const ENCRYPTION_KEY = process.env.PROXY_ENCRYPTION_KEY;
+
+const proxy = createProxyHandler({
+  encryptionKey: ENCRYPTION_KEY,
+});
+
+const handler = async (
+  req: NextRequest,
+  { params }: { params: Promise<{ path: string[] }> },
+) => {
+  const { path } = await params;
+  return proxy(req, { path });
+};
+
+export const GET = handler;
+export const POST = handler;
+export const PUT = handler;
+export const PATCH = handler;
+export const DELETE = handler;

package/dist/commands/init/templates/nextjs/config.template

@@ -0,0 +1,15 @@
+import type { NextConfig } from "next";
+
+const nextConfig: NextConfig = {
+  /* config options here */ images: {
+    remotePatterns: [
+      {
+        protocol: "https",
+        hostname: "images.unsplash.com",
+        pathname: "/**",
+      },
+    ],
+  },
+};
+
+export default nextConfig;

package/dist/commands/init/templates/nextjs/env.template

@@ -0,0 +1,23 @@
+# Host runtime configuration.
+# Variables prefixed with NEXT_PUBLIC_ are exposed to the browser by Next.js;
+# the package's `<QuikConfigProvider>` reads them on the client.
+# Variables without the prefix are server-only — the proxy route reads
+# `PROXY_ENCRYPTION_KEY` from this file.
+
+# Tenant identity forwarded to the package's transport layer.
+NEXT_PUBLIC_TENANT_SLUG={{TENANT_SLUG}}
+NEXT_PUBLIC_TENANT_API_KEY={{TENANT_API_KEY}}
+
+# Where the package's `apiFetch` sends requests. The host decides where
+# to mount the package's API proxy (or whether to point at the backend
+# directly). This value flows through `<QuikConfigProvider apiBaseUrl=...>`
+# into `apiFetch`. The package's internal `QUIK_API_BASE_URL` constant
+# (in `src/lib/transport/api-config.ts`) acts as a fallback if this is
+# unset.
+NEXT_PUBLIC_API_BASE_URL={{API_BASE_URL}}
+
+# E2E encryption (AES-256-GCM). Both keys must hold the same 32-byte
+# base64-encoded secret for the round-trip to work. With either key
+# absent, requests pass through as plain JSON.
+PROXY_ENCRYPTION_KEY={{SECRET_KEY}}
+NEXT_PUBLIC_ENCRYPTION_KEY={{SECRET_KEY}}

package/dist/commands/init/templates/nextjs/layout.template

@@ -0,0 +1,67 @@
+import { QuikConfigProvider, QuikThemeConfig } from "@quikcr/quik-engine";
+import type { Metadata } from "next";
+import { Poppins } from "next/font/google";
+import type * as React from "react";
+import "@quikcr/quik-engine/styles.css";
+// import "./globals.css";
+
+const poppins = Poppins({
+  variable: "--font-poppins",
+  subsets: ["latin"],
+  display: "swap",
+  weight: ["400", "500", "600", "700"],
+});
+
+export const metadata: Metadata = {
+  title: "QuikEngine — The operating system for SaaS products",
+  description:
+    "QuikEngine is a self-contained Next.js 16+ package that powers CRM, HRMS, Accounting, ERP, and more — built as the foundation for your next SaaS product.",
+};
+
+/**
+ * The host application's root layout.
+ *
+ * Owns the <html>/<body> shell. The package's compiled stylesheet is
+ * imported via @import inside `app/globals.css` (first line) so the
+ * host's :root / .dark overrides win on cascade.
+ *
+ * `<QuikConfigProvider>` is the package's opt-in channel for host
+ * configuration. The demo forwards NEXT_PUBLIC_API_URL and
+ * NEXT_PUBLIC_API_KEY so any future console screen that calls the host
+ * API can read them through `useQuikConfig()`.
+ *
+ * `suppressHydrationWarning` silences the expected `next-themes` warning
+ * when the package flips the `dark` class on <html> after mount.
+ */
+
+const theme: QuikThemeConfig = {
+  primaryColor: "#50C878",
+  fontFamily: "geist-sans",
+  fontSize: 0.9,
+  borderRadius: 0.75,
+};
+
+export default function RootLayout({
+  children,
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <html
+      lang="en"
+      className={`${poppins.variable} h-full antialiased`}
+      suppressHydrationWarning
+    >
+      <body className="min-h-full bg-background font-sans text-foreground">
+          <QuikConfigProvider
+            tenantSlug={process.env.NEXT_PUBLIC_TENANT_SLUG ?? ""}
+            tenantApiKey={process.env.NEXT_PUBLIC_TENANT_API_KEY ?? ""}
+            apiBaseUrl={process.env.NEXT_PUBLIC_API_BASE_URL ?? ""}
+            theme={theme}
+          >
+            {children}
+          </QuikConfigProvider>
+      </body>
+    </html>
+  );
+}