workspai 0.43.0

package/templates/kits/fastapi-standard/README.md.j2

@@ -0,0 +1,140 @@
+# {{ project_name | replace('_', ' ') | title }}
+
+A minimal FastAPI service generated with Workspai's **FastAPI Standard Kit**. Python-backed capabilities (configuration, logging, persistence, observability, authentication, etc.) are provided by RapidKit Core modules when you opt into the Python engine.
+
+## Quick start
+
+```bash
+# Bootstrap dependencies (creates .venv + installs Poetry-managed deps)
+npx workspai init  # use make init if you prefer a Make target
+
+# Copy env templates and install hooks/tooling
+./bootstrap.sh
+
+# Run linting, typing, testing, and supply-chain audits
+make lint
+make typecheck
+make test
+make audit
+
+# Start development server with hot reload
+make dev
+npx workspai dev  # same as make dev but auto-detects the project
+
+# Prefer project-local RapidKit Core helpers when you want it to resolve scripts automatically
+npx workspai lint
+npx workspai test
+npx workspai start
+```
+
+> Re-run `npx workspai init` (or `make init`) whenever dependencies change, or use `SKIP_INIT=1 make install` if you only need to refresh tooling/hooks without reinstalling packages.
+
+> Lockfiles are generated automatically during scaffolding. Set `RAPIDKIT_SKIP_LOCKS=1` (or `RAPIDKIT_GENERATE_LOCKS=0`) before running `workspai create` if you need to opt out.
+
+> Want the full project-local RapidKit Core catalog? Run `rapidkit --help` when RapidKit Core is installed, or use `npx workspai --help` for workspace-level commands.
+
+---
+
+## Local development
+
+- `npx workspai init` bootstraps dependencies via the project-aware CLI.
+- `make init` is an optional alias for `npx workspai init` when you prefer Make targets.
+- `make install` re-runs `npx workspai init` (unless you set `SKIP_INIT=1`) and refreshes developer tooling such as pre-commit hooks.
+- `./bootstrap.sh` copies `.env.example` to `.env` (if missing) and runs `SKIP_INIT=1 make install` for you.
+- `make dev` (or `npx workspai dev`) launches Uvicorn with the correct module path and reload settings.
+- `make lint`, `make typecheck`, and `make test` wrap Ruff, mypy, and pytest for consistent CI parity.
+- `make audit` shells out to `pip-audit` to surface vulnerable dependencies.
+- Prefer `npx workspai lint`, `npx workspai test`, and `npx workspai start` if you want the project-aware launcher to autodetect the virtualenv and command wiring.
+```
+
+## Available commands
+
+```bash
+npx workspai init   # 🔧 Bootstrap the project (create .venv + install deps)
+make init           # 🔧 Optional alias for npx workspai init
+./bootstrap.sh      # 🪄 Copy env template + install hooks/tooling (idempotent)
+npx workspai dev    # 🚀 Start development server with hot reload
+make dev            # 🚀 Alternative via Makefile helper
+npx workspai start  # ⚡ Start production server
+npx workspai lint   # 🔧 Run lint checks via project-aware CLI
+npx workspai test   # 🧪 Run pytest through the project-aware launcher
+make install        # 📦 Install Poetry deps + hooks
+make lint           # ✅ Lint via Ruff + Black
+make typecheck      # 🔍 Run mypy on src
+make test           # 🧪 Run tests
+make audit          # 🔐 Run pip-audit across dependencies
+make docker-up      # 🐳 Start docker compose stack (if enabled)
+```
+
+## Project layout
+
+- `src/main.py` – FastAPI application entrypoint
+- `src/routing/` – Core routers (health) and anchors for module routers
+- `src/modules/` – Module bootstrap anchors
+- `pyproject.toml` – Poetry configuration and dependencies
+- `Makefile` – Common developer workflows (format, lint, docker, etc.)
+- `Dockerfile` / `docker-compose.yml` – Optional container setup for local dev and deployment
+- `.github/workflows/ci.yml` – Optional GitHub Actions pipeline for linting and tests
+
+## Example feature
+
+The scaffold ships with a tiny in-memory **notes** API mounted under `/api/examples/notes`. Use it as a safe playground for wiring routers, schemas, and tests without touching your real domain logic:
+
+```bash
+# Create a note
+curl -s -X POST http://localhost:8000/api/examples/notes \
+	-H "Content-Type: application/json" \
+	-d '{"title":"first","body":"scaffolded by Workspai"}'
+
+# List notes
+curl -s http://localhost:8000/api/examples/notes | jq
+```
+
+The implementation intentionally stays in memory so you can replace it with a repository-backed service once you install RapidKit Core database modules.
+
+{% if selected_modules %}
+## Recommended RapidKit Core modules
+
+The following RapidKit Core modules are suggested during scaffolding; install them any time with `rapidkit add module <name>` after activating the project launcher:
+
+{% for module in selected_modules %}- {{ module.name | replace('_', ' ') | title }} (`{{ module.name }}`{% if not module.required %}, optional{% endif %}) – tier: {{ module.tier }}
+{% endfor %}
+{% endif %}
+
+## Adding features
+
+Use `rapidkit add module <module-name>` to install optional capabilities. Modules inject imports, routes, and services through the anchors defined in `src/main.py` and `src/routing/__init__.py`.
+
+During kit generation you can decide whether the RapidKit Core modules ship with the scaffold:
+
+```text
+Install the RapidKit Core settings module? [Y/n]
+Install the RapidKit Core logging module? [Y/n]
+Install deployment module assets (Docker/CI)? [Y/n]
+```
+
+### Scaffold toggles vs RapidKit Core modules
+
+- `enable_*` prompts (for Docker, CI, SQLite, etc.) control the starter assets generated by this kit.
+- `install_*` prompts control which RapidKit Core modules are installed up front.
+- You can always add modules later with `rapidkit add module <name>` if you skip them during scaffolding.
+
+When you need deployment artefacts in an existing project, install the optional `deployment` module:
+
+```bash
+rapidkit add module deployment
+rapidkit modules lock --overwrite
+```
+
+<!-- <<<inject:module-snippet>>> -->
+
+## 📄 License
+
+This project is licensed under the **{{ license }}** License - see the `LICENSE` file included at the project root for details.
+
+## 🔒 Security & secrets
+
+- Copy `.env.example` to `.env` and populate secrets (`SECRET_KEY`, DB credentials, etc.) before deploying.
+- **Do not** commit real secrets or `.env` to git; `.gitignore` already contains `.env` to protect accidental commits.
+- For production, tighten CORS and allowed hosts rather than using wildcard settings provided for convenience in dev.
+- Run `make audit` (pip-audit) before releases to catch dependency CVEs early.

package/templates/kits/fastapi-standard/common/env.example.j2

@@ -0,0 +1,10 @@
+# Workspai environment defaults
+PROJECT_NAME="{{ project_name | default('workspai-app') }}"
+ENV="development"
+DEBUG="true"
+APP_HOST="0.0.0.0"
+APP_PORT="8000"
+LOG_LEVEL="info"
+
+# Module-specific environment variables
+# <<<inject:module-env>>>

package/templates/kits/fastapi-standard/env.example.j2

@@ -0,0 +1 @@
+{% include 'common/env.example.j2' %}

package/templates/kits/fastapi-standard/pyproject.toml.j2

@@ -0,0 +1,64 @@
+[tool.poetry]
+name = "{{ project_name }}"
+version = "{{ app_version }}"
+description = "{{ description }}"
+authors = ["{{ author }} <you@example.com>"]
+license = "{{ license }}"
+packages = [{ include = "src" }]
+
+[tool.poetry.scripts]
+dev = "src.cli:dev"
+start = "src.cli:start"
+build = "src.cli:build"
+test = "src.cli:test"
+lint = "src.cli:lint"
+format = "src.cli:format"
+help = "src.cli:help_cmd"
+
+[tool.poetry.dependencies]
+python = "^{{ python_version }}"
+fastapi = "^0.128.0"
+uvicorn = { extras = ["standard"], version = "^0.40.0" }
+pydantic = "^2.12.5"
+{% if has_settings -%}
+pydantic-settings = { version = "^2.12.0", extras = ["yaml"] }
+{% endif %}
+# <<<inject:poetry-dependencies>>>
+
+[tool.poetry.group.dev.dependencies]
+pytest = "^9.0.2"
+pytest-asyncio = "^1.3.0"
+pytest-cov = "^7.0.0"
+httpx = "^0.28.1"
+ruff = "^0.14.10"
+black = "^25.12.0"
+isort = "^7.0.0"
+mypy = "^1.19.1"
+build = "^1.3.0"
+
+# <<<inject:poetry-dev-dependencies>>>
+
+[build-system]
+requires = ["poetry-core"]
+build-backend = "poetry.core.masonry.api"
+
+[tool.pytest.ini_options]
+markers = [
+	"integration: mark tests as integration tests",
+	"template_integration: mark template integration tests",
+]
+
+[tool.ruff]
+line-length = 100
+exclude = [".workspai/vendor", ".rapidkit/vendor"]
+
+[tool.ruff.lint]
+ignore = ["E501"]
+
+[tool.mypy]
+python_version = "{{ python_version }}"
+ignore_missing_imports = true
+warn_unused_configs = false
+show_error_codes = true
+# Ignore vendor snapshots and generated health shims from strict static checking
+exclude = "(^\\.workspai/vendor/|^\\.rapidkit/vendor/|src/health/|src/main.py$)"

package/templates/kits/fastapi-standard/src/__init__.py.j2

@@ -0,0 +1,3 @@
+"""{{ project_name }} package."""
+
+__all__ = ["main"]

package/templates/kits/fastapi-standard/src/cli.py.j2

@@ -0,0 +1,171 @@
+#!/usr/bin/env python3
+"""Project CLI wrapper for {{ project_name }}.
+
+This file prefers a per-project CLI (generated at `.workspai/cli.py`) when
+available. If not present it prints helpful guidance directing users to
+`workspai init` and does not attempt to make assumptions about a packaging
+environment.
+"""
+
+import importlib.util
+import sys
+import argparse
+from pathlib import Path
+from typing import Optional
+
+
+def _missing_cli(name: str) -> None:
+    print(f"❌ Missing project-local CLI (.workspai/cli.py) - can't run '{name}'")
+    print("💡 If you're a new user run: workspai init  # create venv + install deps")
+    sys.exit(127)
+
+
+def _load_project_cli_module() -> Optional[object]:
+    project_root = Path(__file__).resolve().parents[1]
+    cli_file = project_root / ".workspai" / "cli.py"
+    if not cli_file.exists():
+        legacy_cli_file = project_root / ".rapidkit" / "cli.py"
+        if not legacy_cli_file.exists():
+            return None
+        cli_file = legacy_cli_file
+    spec = importlib.util.spec_from_file_location("project_cli", str(cli_file))
+    if spec is None or spec.loader is None:
+        return None
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)  # type: ignore
+    return module
+
+
+_mod = _load_project_cli_module()
+
+
+# Default placeholders -- call `_missing_cli` if the project-local CLI isn't
+# available. These are real functions so linters don't complain.
+def init() -> None:
+    _missing_cli("init")
+
+
+def dev() -> None:
+    _missing_cli("dev")
+
+
+def start() -> None:
+    _missing_cli("start")
+
+
+def build() -> None:
+    _missing_cli("build")
+
+
+def test() -> None:
+    _missing_cli("test")
+
+
+def lint() -> None:
+    _missing_cli("lint")
+
+
+def format() -> None:  # type: ignore[misc]
+    _missing_cli("format")
+
+
+def help_cmd() -> None:
+    print("Usage: poetry run <command>  # (init|dev|start|build|test|lint|format)")
+
+
+if _mod is not None:
+    # prefer project-provided implementations when available
+    init = getattr(_mod, "init", init)
+    dev = getattr(_mod, "dev", dev)
+    start = getattr(_mod, "start", start)
+    build = getattr(_mod, "build", build)
+    test = getattr(_mod, "test", test)
+    lint = getattr(_mod, "lint", lint)
+    format = getattr(_mod, "format", format)
+    help_cmd = getattr(_mod, "help_cmd", help_cmd)
+
+
+_dev_impl = dev
+_start_impl = start
+
+
+def _runtime_kwargs_from_argv(argv: list[str]) -> dict:
+    parser = argparse.ArgumentParser(add_help=False)
+    parser.add_argument("-p", "--port", type=int, dest="port")
+    parser.add_argument("--host", dest="host")
+    parser.add_argument("--allow-global-runtime", action="store_true", dest="allow_global_runtime")
+    ns, _ = parser.parse_known_args(argv)
+
+    kwargs = {}
+    if ns.port is not None:
+        kwargs["port"] = ns.port
+    if ns.host is not None:
+        kwargs["host"] = ns.host
+    if ns.allow_global_runtime:
+        kwargs["allow_global_runtime"] = True
+    return kwargs
+
+
+def dev() -> None:  # type: ignore[no-redef]
+    kwargs = _runtime_kwargs_from_argv(sys.argv[1:])
+    try:
+        _dev_impl(**kwargs)
+    except TypeError:
+        _dev_impl()
+
+
+def start() -> None:  # type: ignore[no-redef]
+    kwargs = _runtime_kwargs_from_argv(sys.argv[1:])
+    try:
+        _start_impl(**kwargs)
+    except TypeError:
+        _start_impl()
+
+
+def main() -> None:
+    if len(sys.argv) < 2:
+        help_cmd()
+        return
+
+    command = sys.argv[1]
+    commands = {
+        "init": init,
+        "dev": dev,
+        "start": start,
+        "build": build,
+        "test": test,
+        "lint": lint,
+        "format": format,
+        "help": help_cmd,
+    }
+
+    if command in commands:
+        if command in ("dev", "start"):
+            parser = argparse.ArgumentParser(prog=f"poetry run {command}", add_help=False)
+            parser.add_argument("-p", "--port", type=int, dest="port")
+            parser.add_argument("--host", dest="host")
+            parser.add_argument("--allow-global-runtime", action="store_true", dest="allow_global_runtime")
+            ns, _ = parser.parse_known_args(sys.argv[2:])
+
+            kwargs = {}
+            if ns.port is not None:
+                kwargs["port"] = ns.port
+            if ns.host is not None:
+                kwargs["host"] = ns.host
+            if ns.allow_global_runtime:
+                kwargs["allow_global_runtime"] = True
+
+            try:
+                commands[command](**kwargs)
+            except TypeError:
+                commands[command]()
+        else:
+            commands[command]()
+    else:
+        print(f"Unknown command: {command}")
+        print("Run 'poetry run help' to see available commands.")
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()

package/templates/kits/fastapi-standard/src/main.py.j2

@@ -0,0 +1,66 @@
+"""{{ project_name }} application entrypoint."""
+
+from __future__ import annotations
+
+from collections.abc import AsyncIterator
+from contextlib import asynccontextmanager
+
+from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
+
+# <<<inject:imports>>>
+
+try:
+    # canonical health package
+    from src.health import register_health_routes as _core_register_health_routes
+except ImportError:  # pragma: no cover - health package not generated yet
+
+    def _register_health_routes(_: FastAPI) -> None:
+        return None
+
+else:
+
+    def _register_health_routes(app: FastAPI) -> None:
+        try:
+            _core_register_health_routes(app)
+        except Exception:  # pragma: no cover - defensive best-effort registration
+            return None
+
+
+from .routing import api_router
+
+
+@asynccontextmanager
+async def lifespan(app: FastAPI) -> AsyncIterator[None]:
+    """Coordinate startup/shutdown hooks contributed by RapidKit Core modules."""
+
+    _ = app  # ensure the app reference stays available for injected hooks
+    # <<<inject:startup>>>
+    try:
+        yield
+    finally:
+        # <<<inject:shutdown>>>
+        pass
+
+
+app = FastAPI(
+    title="{{ project_name }}",
+    description="{{ description }}",
+    version="{{ app_version }}",
+    docs_url="/docs",
+    redoc_url="/redoc",
+    lifespan=lifespan,
+)
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+app.include_router(api_router, prefix="/api")
+# Expose module-provided health routers under /api/health/module/*
+_register_health_routes(app)
+# <<<inject:routes>>>

package/templates/kits/fastapi-standard/src/modules/__init__.py.j2

@@ -0,0 +1,3 @@
+"""Module bootstrap namespace."""
+
+# <<<inject:module-init>>>

package/templates/kits/fastapi-standard/src/routing/__init__.py.j2

@@ -0,0 +1,16 @@
+"""API router assembly."""
+
+from __future__ import annotations
+
+from fastapi import APIRouter
+
+from .health import router as health_router
+from .examples import router as examples_router
+
+# <<<inject:router-imports>>>
+
+api_router = APIRouter()
+
+api_router.include_router(health_router, prefix="/health", tags=["health"])
+api_router.include_router(examples_router, prefix="/examples", tags=["examples"])
+# <<<inject:router-mount>>>

package/templates/kits/fastapi-standard/src/routing/examples.py.j2

@@ -0,0 +1,71 @@
+"""Sample in-memory notes endpoints to demonstrate Workspai routing."""
+
+from __future__ import annotations
+
+from typing import Dict, List
+
+from fastapi import APIRouter, HTTPException, status
+from pydantic import BaseModel, Field
+
+router = APIRouter(tags=["examples"])
+
+
+class NoteCreate(BaseModel):
+    """Payload for creating a note."""
+
+    title: str = Field(..., max_length=80)
+    body: str = Field(..., max_length=500)
+
+
+class Note(NoteCreate):
+    """Serialized note returned by the API."""
+
+    id: int
+
+
+_STORE: Dict[int, Note] = {}
+_NEXT_ID = 1
+
+
+@router.post(
+    "/notes",
+    response_model=Note,
+    status_code=status.HTTP_201_CREATED,
+    summary="Create a note",
+)
+def create_note(payload: NoteCreate) -> Note:
+    """Persist a note in memory and return it."""
+
+    global _NEXT_ID  # noqa: PLW0603 - intentional in-memory auto increment
+    note = Note(id=_NEXT_ID, **payload.model_dump())
+    _STORE[_NEXT_ID] = note
+    _NEXT_ID += 1
+    return note
+
+
+@router.get(
+    "/notes",
+    response_model=List[Note],
+    summary="List all notes",
+)
+def list_notes() -> List[Note]:
+    """Return all notes stored so far."""
+
+    return list(_STORE.values())
+
+
+@router.get(
+    "/notes/{note_id}",
+    response_model=Note,
+    summary="Retrieve a single note",
+)
+def get_note(note_id: int) -> Note:
+    """Retrieve a note by identifier or raise 404."""
+
+    note = _STORE.get(note_id)
+    if not note:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Note not found",
+        )
+    return note

package/templates/kits/fastapi-standard/src/routing/health.py.j2

@@ -0,0 +1,22 @@
+"""Health endpoints."""
+
+from __future__ import annotations
+
+from time import monotonic
+
+from fastapi import APIRouter
+
+router = APIRouter(tags=["health"])
+
+_START_TIME = monotonic()
+
+
+@router.get("/", summary="Health check")
+async def heartbeat() -> dict[str, object]:
+    """Return basic service heartbeat."""
+    return {
+        "status": "ok",
+        "version": "{{ app_version }}",
+        "uptime": monotonic() - _START_TIME,
+        "module": "app",
+    }

package/templates/kits/fastapi-standard/tests/__init__.py.j2

@@ -0,0 +1 @@
+"""Test package placeholder."""

package/templates/kits/fastapi-standard/tests/test_examples.py.j2

@@ -0,0 +1,29 @@
+"""Example feature tests exercising the in-memory notes API."""
+
+from __future__ import annotations
+
+from fastapi.testclient import TestClient
+
+from src.main import app
+
+client = TestClient(app)
+
+
+def test_create_and_list_notes() -> None:
+    payload = {"title": "First note", "body": "Documented via Workspai."}
+    create_response = client.post("/api/examples/notes", json=payload)
+    assert create_response.status_code == 201
+    data = create_response.json()
+    assert data["title"] == payload["title"]
+    assert data["body"] == payload["body"]
+
+    list_response = client.get("/api/examples/notes")
+    assert list_response.status_code == 200
+    notes = list_response.json()
+    assert any(note["title"] == payload["title"] for note in notes)
+
+
+def test_get_missing_note_returns_404() -> None:
+    response = client.get("/api/examples/notes/999")
+    assert response.status_code == 404
+    assert response.json()["detail"] == "Note not found"

package/templates/kits/fastapi-standard/tests/test_health.py.j2

@@ -0,0 +1,17 @@
+"""Health-check tests for generated FastAPI standard projects."""
+
+from fastapi.testclient import TestClient
+
+from src.main import app
+
+client = TestClient(app)
+
+
+def test_health_endpoint() -> None:
+    response = client.get("/api/health/")
+    assert response.status_code == 200
+    payload = response.json()
+    assert payload["status"] == "ok"
+    assert "version" in payload
+    assert "uptime" in payload
+    assert "module" in payload

package/templates/kits/nestjs-standard/Dockerfile.j2

@@ -0,0 +1,41 @@
+# syntax=docker/dockerfile:1.6
+ARG NODE_VERSION=20.19.0-alpine
+FROM node:${NODE_VERSION} as builder
+
+WORKDIR /usr/src/app
+
+COPY package*.json ./
+COPY . .
+
+RUN set -eux; \
+  if [ "{{ package_manager }}" = "pnpm" ]; then \
+    corepack enable pnpm && pnpm install --frozen-lockfile; \
+    pnpm build; \
+  elif [ "{{ package_manager }}" = "yarn" ]; then \
+    corepack enable yarn && yarn install --frozen-lockfile; \
+    yarn build; \
+  else \
+    if [ -f package-lock.json ]; then npm ci; else npm install; fi; \
+    npm run build; \
+  fi
+
+FROM node:${NODE_VERSION}
+ENV NODE_ENV=production
+WORKDIR /usr/src/app
+
+COPY package*.json ./
+
+RUN set -eux; \
+  if [ "{{ package_manager }}" = "pnpm" ]; then \
+    corepack enable pnpm && pnpm install --prod --frozen-lockfile; \
+  elif [ "{{ package_manager }}" = "yarn" ]; then \
+    corepack enable yarn && yarn install --production --frozen-lockfile; \
+  else \
+    if [ -f package-lock.json ]; then npm ci --omit=dev; else npm install --omit=dev; fi; \
+  fi
+
+COPY --from=builder /usr/src/app/dist ./dist
+
+
+EXPOSE 8000
+CMD ["node", "dist/main"]