refactor: update references from api-template to boringstack-api and ui-template to apps/ui

This commit includes several updates across the repository to reflect the new naming conventions. The changes involve updating documentation, workflow files, and configuration files to replace instances of "api-template" with "boringstack-api" and "ui-template" with "apps/ui". Additionally, the layout in AGENTS.md has been improved for clarity.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: agjs

.github/workflows/apps-api-acl-drift.yml

@@ -1,9 +1,9 @@
 name: acl-drift
 
-# Catch ui-template ACL type drift in the api-template PR that introduced
-# it. The generated file lives in ui-template's tree; without this gate,
+# Catch apps/ui ACL type drift in the apps/api PR that introduced
+# it. The generated file lives in the UI app's tree; without this gate,
 # changes to src/lib/acl/acl.constants.ts here ship without the
-# corresponding ui-template regeneration.
+# corresponding apps/ui regeneration.
 
 on:
   push:
@@ -26,7 +26,7 @@ permissions:
 
 jobs:
   drift:
-    name: ui-template ACL types are fresh
+    name: apps/ui ACL types are fresh
     defaults:
       run:
         working-directory: apps/api
@@ -41,11 +41,11 @@ jobs:
         with:
           bun-version: 1.3.13
 
-      - name: Install api-template deps
+      - name: Install apps/api deps
         working-directory: apps/api
         run: bun install --frozen-lockfile
 
-      - name: Check ui-template ACL types are up-to-date
+      - name: Check apps/ui ACL types are up-to-date
         working-directory: apps/api
         env:
           BORINGSTACK_UI_DIR: ${{ github.workspace }}/apps/ui

.github/workflows/apps-api-openapi-drift.yml

@@ -1,9 +1,9 @@
 name: openapi-drift
 
-# Catch ui-template schema drift in the api-template PR that introduced it.
-# Before this job, drift only surfaced in infra-docker-compose-template's
+# Catch apps/ui schema drift in the apps/api PR that introduced it.
+# Before this job, drift only surfaced in infra/compose's
 # full-stack-smoke workflow — which runs only on infra pushes, so drift
-# would sit on api-template main until someone touched infra.
+# would sit on apps/api main until someone touched infra.
 
 on:
   push:
@@ -28,7 +28,7 @@ permissions:
 
 jobs:
   drift:
-    name: ui-template OpenAPI schema is fresh
+    name: apps/ui OpenAPI schema is fresh
     runs-on: ubuntu-latest
     timeout-minutes: 8
 
@@ -79,7 +79,7 @@ jobs:
         with:
           bun-version: 1.3.13
 
-      - name: Install api-template deps
+      - name: Install apps/api deps
         working-directory: apps/api
         run: bun install --frozen-lockfile
 
@@ -111,11 +111,11 @@ jobs:
         with:
           bun-version: 1.3.13
 
-      - name: Install ui-template deps
+      - name: Install apps/ui deps
         working-directory: apps/ui
         run: bun install --frozen-lockfile
 
-      - name: Check ui-template schema is up-to-date
+      - name: Check apps/ui schema is up-to-date
         working-directory: apps/ui
         env:
           OPENAPI_URL: http://localhost:3000/swagger/json

.github/workflows/apps-api-release.yml

@@ -5,7 +5,7 @@ name: release
 #   - every push of a semver tag v*.*.* (adds the :<semver> tag, e.g. :0.3.0)
 #
 # Downstream consumers (BoringStack's WUD service in the prod compose stack)
-# watch ghcr.io/<owner>/api-template:latest and auto-redeploy when a new sha
+# watch ghcr.io/<owner>/<repo>-api:latest and auto-redeploy when a new sha
 # is pushed.
 
 on:
@@ -53,12 +53,9 @@ jobs:
         id: meta
         uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
         with:
-          # The image path tracks BOTH the owner AND the repo name, so a
-          # "Use this template" fork with a different name (e.g. `my-saas-api`)
-          # publishes to ghcr.io/<their-owner>/<their-renamed-repo> with no
-          # config change. The consumer side (infra-docker-compose-template's
-          # compose .env) reads the same values via IMAGE_OWNER + API_IMAGE.
-          images: ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}
+          # Monorepo image names are suffix-based so API and UI publish distinct
+          # packages from the same repository.
+          images: ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}-api
           tags: |
             type=raw,value=latest,enable={{is_default_branch}}
             type=sha,prefix=sha-,format=short

.github/workflows/apps-docs-linkcheck.yml

@@ -48,11 +48,11 @@ jobs:
       - name: Install docs deps
         run: bun install --frozen-lockfile
 
-      - name: Install ui-template deps for lint-meta export
+      - name: Install apps/ui deps for lint-meta export
         working-directory: apps/ui
         run: bun install --frozen-lockfile
 
-      - name: Install api-template deps for lint-meta export
+      - name: Install apps/api deps for lint-meta export
         working-directory: apps/api
         run: bun install --frozen-lockfile
 

.github/workflows/apps-ui-release.yml

@@ -10,7 +10,7 @@ name: release
 #   - on a changesets publish  → also :<semver> (from the merged Version Packages PR)
 #
 # Downstream consumers (BoringStack's WUD service in the prod compose stack)
-# watch ghcr.io/<owner>/ui-template:latest and auto-redeploy when a new sha
+# watch ghcr.io/<owner>/<repo>-ui:latest and auto-redeploy when a new sha
 # is pushed.
 
 on:
@@ -83,9 +83,9 @@ jobs:
         id: meta
         uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
         with:
-          # Tracks both the fork owner AND the repo name, so renaming after
-          # "Use this template" Just Works without touching the workflow.
-          images: ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}
+          # Monorepo image names are suffix-based so API and UI publish distinct
+          # packages from the same repository.
+          images: ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}-ui
           # Always produce :latest (on main) and :sha-<7>. Add the semver tag
           # only when changesets actually published a new version on this run.
           tags: |

.github/workflows/apps-ui-validate.yml

@@ -68,7 +68,7 @@ jobs:
           retention-days: 1
 
       # NOTE: Playwright report upload lives in full-stack-smoke.yml in the
-      # infra-docker-compose-template repo, where E2E actually runs.
+      # infra/compose repo, where E2E actually runs.
 
       - name: Upload Storybook
         if: always()

AGENTS.md

@@ -13,13 +13,13 @@ bun run check   # drift checks before push
 
 ## Layout
 
-| Path | Was | Role |
-|------|-----|------|
-| `apps/api` | api-template | Bun + Elysia API |
-| `apps/ui` | ui-template | Vite + React UI |
-| `apps/docs` | .github / boringstack.xyz | Astro docs site |
-| `infra/compose` | infra-docker-compose-template | Docker Compose |
-| `infra/bootstrap` | infra-bootstrap-tofu-template | OpenTofu bootstrap |
+| Path              | Role                   |
+| ----------------- | ---------------------- |
+| `apps/api`        | Bun + Elysia API       |
+| `apps/ui`         | Vite + React UI        |
+| `apps/docs`       | Astro docs site        |
+| `infra/compose`   | Docker Compose runtime |
+| `infra/bootstrap` | OpenTofu bootstrap     |
 
 CI: `.github/workflows/` at repo root with path filters.
 

apps/api/.env.example

@@ -36,7 +36,7 @@ AUTH_RATE_LIMIT_WINDOW_MS=60000
 #
 # Running under docker-compose? Setting these HERE has no effect — the
 # api-migrate service interpolates `${SUPERUSER_EMAIL}` from
-# `infra-docker-compose-template/compose/.env`, not from this file.
+# `infra/compose/compose/.env`, not from this file.
 # Put them in compose/.env instead. (`bun run dev` standalone still
 # reads them from this file as expected.)
 SUPERUSER_EMAIL=
@@ -50,14 +50,14 @@ E2E_TEST_ENDPOINTS_ENABLED=false
 
 # --- Error tracking — Sentry-compatible ---------------------------------
 # DSN can point at self-hosted GlitchTip (see
-# infra-docker-compose-template/docs/glitchtip.md) or sentry.io — same
+# infra/compose/docs/glitchtip.md) or sentry.io — same
 # wire protocol. Empty DSN means Sentry is not initialized.
 SENTRY_DSN=
 SENTRY_TRACES_SAMPLE_RATE=0.1
 
 # Email — pick one provider; only that provider's keys are required.
 # Default: Cloudflare Email Service (https://developers.cloudflare.com/email-service/).
-# Setup walkthrough: infra-docker-compose-template/docs/runbooks/cloudflare-email.md
+# Setup walkthrough: infra/compose/docs/runbooks/cloudflare-email.md
 # In dev with all keys empty, a noop provider is used and emails are logged.
 # For local template iteration, set EMAIL_PROVIDER=smtp + SMTP_HOST=mailpit
 # and start the compose stack with WITH_MAILPIT=1; emails are caught at

apps/api/README.md

@@ -7,7 +7,7 @@
 <p align="center">
   <a href="https://boringstack.xyz"><img src="https://img.shields.io/badge/boringstack.xyz-4ade80?style=for-the-badge&logo=safari&logoColor=4ade80&labelColor=090909" alt="boringstack.xyz"></a>
   <a href="https://boringstack.xyz/api/overview/"><img src="https://img.shields.io/badge/Docs-4ade80?style=for-the-badge&logo=readthedocs&logoColor=4ade80&labelColor=090909" alt="Docs"></a>
-  <a href="https://github.com/boringstack-xyz/api-template"><img src="https://img.shields.io/badge/GitHub-4ade80?style=for-the-badge&logo=github&logoColor=4ade80&labelColor=090909" alt="GitHub"></a>
+  <a href="https://github.com/boringstack-xyz/boringstack/tree/main/apps/api"><img src="https://img.shields.io/badge/GitHub-4ade80?style=for-the-badge&logo=github&logoColor=4ade80&labelColor=090909" alt="GitHub"></a>
 </p>
 
 <p align="center">
@@ -18,11 +18,11 @@
   <img src="https://img.shields.io/badge/TypeScript-3178c6?style=for-the-badge&logo=typescript&logoColor=3178c6&labelColor=090909" alt="TypeScript">
 </p>
 
-# api-template
+# apps/api
 
 Part of [BoringStack](https://boringstack.xyz).
 
-For documentation on how to run, configure, and extend this template, see the [API template docs](https://boringstack.xyz/api/overview/).
+For documentation on how to run, configure, and extend the API app, see the [API docs](https://boringstack.xyz/api/overview/).
 
 ## License
 

apps/api/SECURITY.md

@@ -47,7 +47,7 @@ fails. The weekly cron exists so this surfaces even when no one pushes.
 
 ## Repo settings hardening
 
-The `main` branch on every BoringStack template repo enforces:
+The `main` branch on the BoringStack monorepo enforces:
 
 - Signed commits (configure your local signing before pushing)
 - Linear history (squash-merges only)
@@ -82,7 +82,7 @@ See `AGENTS.md` → "Security skill set" for the full skill reference.
 - **Security headers (CSP, HSTS, X-Frame-Options, Permissions-Policy,
   Referrer-Policy, X-Content-Type-Options)** — set by **Traefik** in
   front of the api, not by the api itself. The single source of truth
-  is `infra-docker-compose-template/compose/docker-compose.production-labels.yml`.
+  is `infra/compose/compose/docker-compose.production-labels.yml`.
   Running the api standalone (no Traefik in front) leaves it without
   these headers — front it with Traefik or your own reverse proxy.
 - **CORS** — gated on `ALLOWED_ORIGINS`. Empty (default) = not mounted