@agenticprimitives/create-app
Part of Agentic Primitives — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. Developer kit · All packages
npx @agenticprimitives/create-app my-agent-app --template home-client # the first app: a client of the person's agent
cd my-agent-app && pnpm install && npx ap doctor && pnpm dev # Connect with your Home → ask → an act parks for HER signature
npx @agenticprimitives/create-app my-product --template product-repo --pin 1.0.0-alpha.24
cd my-product && pnpm install && npx ap doctor
--template home-client — the Developer Kit's first app (spec 398 §10.1)
A Next.js client of the person's own agent through her Home (spec 397): the app registers itself at her Home MCP
(RFC 7591 — no operator step; localhost redirects are accepted), sends her to her Home to connect (OAuth 2.1 + PKCE),
holds an opaque bearer bound to /mcp sealed in an httpOnly cookie, and asks her agent as her. A read answers under
her standing; an act comes back authority_required with the page on her Home where she signs — the app never
collects a signature. pnpm verify runs the two acts live against a development estate's demo person;
scripts/verify-devkit-starter.mts in Ring 0 is the G2 exit: generate → install from the registry → doctor → typecheck
→ tests → build → the two acts, from a clean directory. Files: src/lib/home-agent.ts (the whole protocol, no
dependency), src/lib/server.ts, app/api/{connect,callback,ask,me,disconnect}, app/page.tsx,
scripts/verify-two-acts.ts, README.md, the projected AGENTS.md/CLAUDE.md/.cursor/rules, .mcp.json (the
Developer MCP), agentic.lock.json pinning @agenticprimitives/devkit alone. If the generator is newer than the pinned
devkit, npx ap doctor --rules --write re-projects the rules with the pinned corpus (the doctor names the drift).
Writes a product repository the way spec 399 §3.6 describes it — the shape ap-discovery, ap-home and
ap-naming are created from, never a copy of the monorepo root:
| Written | Purpose |
|---|---|
package.json, pnpm-workspace.yaml, .npmrc, tsconfig.base.json | pnpm workspace over apps/* + examples/*; strict peers; exact @agenticprimitives/* pins |
agentic.lock.json | the coherent pin set, the rules-source digests, the doctor config, the template revision |
AGENTS.md, CLAUDE.md, .cursor/rules/*.mdc | projected from the pinned rules source (edit the source, run ap doctor --rules --write) |
.github/workflows/ci.yml | typecheck · test · ap doctor · ap doctor --rules |
.github/workflows/live-gates-nightly.yml | ap test --live-gates live-gates.json + ap conform a2a|mcp against the shadow deployment |
live-gates.json | the gates ledger (spec 392 shape), empty until the first verify script moves in |
wrangler.example.toml | the env layout: env-a / env-b live (Ring 0 deploys until the cut), env-a-split shadow (this repo) |
scripts/set-cloudflare-secrets.sh | per-env secrets from a gitignored .secrets.<env> file, never echoed |
DEPLOYER.md, docs/MOVED.md | deployer of record per app + env; the text the cut PR leaves in Ring 0 |
Options: --name <kebab> (defaults to the directory name), --pin <exact version> (defaults to the generating
devkit's version; resolve a dist-tag afterwards with ap upgrade --pin <tag>), --json.
Exit codes: 0 written · 2 usage (non-empty dir, bad name, bad pin, unknown template) · 3 error.
The template carries no hostname, no vertical vocabulary and no key (ADR-0021): every deployment-specific value
is a <placeholder> the product fills in.