@alfredmouelle/create-stack 0.1.0

package/_stack/patterns/better-auth/pattern.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "../../pattern.schema.json",
+  "name": "better-auth",
+  "description": "better-auth v1 with the Drizzle adapter (Postgres). Email+password, email verification, optional Google OAuth, rate limiting and TanStack Start cookies. Ships auth tables, server/client instances, session helpers and a route guard.",
+  "framework": "tanstack-start",
+  "detect": {
+    "deps": [
+      "better-auth"
+    ],
+    "files": []
+  },
+  "dependsOn": [
+    "drizzle"
+  ],
+  "integratesWith": [
+    "trpc"
+  ],
+  "capabilities": [
+    "mailer",
+    "email-kit"
+  ],
+  "deps": [
+    "better-auth"
+  ],
+  "env": [
+    "BETTER_AUTH_URL",
+    "BETTER_AUTH_SECRET",
+    "BETTER_AUTH_GOOGLE_CLIENT_ID",
+    "BETTER_AUTH_GOOGLE_CLIENT_SECRET"
+  ],
+  "files": [
+    {
+      "from": "apps/tanstack-base/src/server/better-auth/config.ts",
+      "to": "<srcRoot>/server/better-auth/config.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/better-auth/client.ts",
+      "to": "<srcRoot>/server/better-auth/client.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/better-auth/session.ts",
+      "to": "<srcRoot>/server/better-auth/session.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/better-auth/emails.tsx",
+      "to": "<srcRoot>/server/better-auth/emails.tsx"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/better-auth/index.ts",
+      "to": "<srcRoot>/server/better-auth/index.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/db/schemas/auth.schema.ts",
+      "to": "<srcRoot>/server/db/schemas/auth.schema.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/routes/api/auth/$.ts",
+      "to": "<srcRoot>/routes/api/auth/$.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/routes/_authed.tsx",
+      "to": "<srcRoot>/routes/_authed.tsx"
+    }
+  ],
+  "wiring": [
+    "Append `export * from './auth.schema'` to <srcRoot>/server/db/schemas/index.ts (created by the drizzle pattern).",
+    "emails.tsx imports ~/server/email (mailer capability) and ~/emails/{reset-password,verify-email} (email-kit). Ensure both capabilities are added; create the two templates if missing."
+  ],
+  "notes": [
+    "Auth tables (user/session/account/verification) live in auth.schema.ts; better-auth manages them via the Drizzle adapter. Add custom user columns via `additionalFields` in config.ts mirrored in auth.schema.ts.",
+    "BETTER_AUTH_SECRET is read implicitly from env by better-auth; the rest are validated in env.ts."
+  ]
+}

package/_stack/patterns/better-auth-next/pattern.json

@@ -0,0 +1,76 @@
+{
+  "$schema": "../../pattern.schema.json",
+  "name": "better-auth-next",
+  "description": "better-auth v1 for Next.js App Router with the Drizzle adapter. Email+password + verification, optional Google OAuth, session via next/headers (react cache), toNextJsHandler catch-all route, and server-component guards. The Next counterpart of the `better-auth` pattern.",
+  "framework": "next",
+  "detect": {
+    "deps": [
+      "better-auth"
+    ],
+    "files": [
+      "src/app/api/auth/[...all]/route.ts"
+    ]
+  },
+  "dependsOn": [
+    "drizzle"
+  ],
+  "integratesWith": [
+    "trpc-next"
+  ],
+  "capabilities": [
+    "mailer",
+    "email-kit"
+  ],
+  "deps": [
+    "better-auth"
+  ],
+  "env": [
+    "BETTER_AUTH_URL",
+    "BETTER_AUTH_SECRET",
+    "BETTER_AUTH_GOOGLE_CLIENT_ID",
+    "BETTER_AUTH_GOOGLE_CLIENT_SECRET"
+  ],
+  "files": [
+    {
+      "from": "apps/next-base/src/server/better-auth/config.ts",
+      "to": "<srcRoot>/server/better-auth/config.ts"
+    },
+    {
+      "from": "apps/next-base/src/server/better-auth/client.ts",
+      "to": "<srcRoot>/server/better-auth/client.ts"
+    },
+    {
+      "from": "apps/next-base/src/server/better-auth/server.ts",
+      "to": "<srcRoot>/server/better-auth/server.ts"
+    },
+    {
+      "from": "apps/next-base/src/server/better-auth/emails.tsx",
+      "to": "<srcRoot>/server/better-auth/emails.tsx"
+    },
+    {
+      "from": "apps/next-base/src/server/better-auth/index.ts",
+      "to": "<srcRoot>/server/better-auth/index.ts"
+    },
+    {
+      "from": "apps/next-base/src/server/auth/guards.ts",
+      "to": "<srcRoot>/server/auth/guards.ts"
+    },
+    {
+      "from": "apps/next-base/src/server/db/schemas/auth.schema.ts",
+      "to": "<srcRoot>/server/db/schemas/auth.schema.ts"
+    },
+    {
+      "from": "apps/next-base/src/app/api/auth/[...all]/route.ts",
+      "to": "<srcRoot>/app/api/auth/[...all]/route.ts"
+    }
+  ],
+  "wiring": [
+    "Append `export * from './auth.schema'` to <srcRoot>/server/db/schemas/index.ts (created by the drizzle pattern).",
+    "emails.tsx imports ~/server/email (mailer) and ~/emails/{reset-password,verify-email} (email-kit) — add both capabilities and the two templates.",
+    "Auth pages live in app/auth/* (server pages) with forms in app/auth/_components/* ('use client', shadcn Form + react-hook-form + valibot)."
+  ],
+  "notes": [
+    "No tanstackStartCookies — cookies are handled by toNextJsHandler. getSession uses next/headers + react cache (server.ts). Protect Server Components/pages with requireAuth() from server/auth/guards.",
+    "Add custom user columns via `additionalFields` in config.ts mirrored in auth.schema.ts."
+  ]
+}

package/_stack/patterns/data-table/pattern.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "../../pattern.schema.json",
+  "name": "data-table",
+  "description": "Headless data tables with TanStack Table: shadcn table + skeleton primitives, a DataTable (loading + empty states), an InfiniteDataTable and a SortableHeader.",
+  "framework": "agnostic",
+  "detect": {
+    "deps": [
+      "@tanstack/react-table"
+    ],
+    "files": []
+  },
+  "dependsOn": [],
+  "deps": [
+    "@tanstack/react-table"
+  ],
+  "env": [],
+  "files": [
+    {
+      "from": "apps/tanstack-base/src/components/ui/table.tsx",
+      "to": "<srcRoot>/components/ui/table.tsx"
+    },
+    {
+      "from": "apps/tanstack-base/src/components/ui/skeleton.tsx",
+      "to": "<srcRoot>/components/ui/skeleton.tsx"
+    },
+    {
+      "from": "apps/tanstack-base/src/components/data-table.tsx",
+      "to": "<srcRoot>/components/data-table.tsx"
+    },
+    {
+      "from": "apps/tanstack-base/src/components/infinite-data-table.tsx",
+      "to": "<srcRoot>/components/infinite-data-table.tsx"
+    },
+    {
+      "from": "apps/tanstack-base/src/components/sortable-header.tsx",
+      "to": "<srcRoot>/components/sortable-header.tsx"
+    }
+  ],
+  "notes": [
+    "Pure React + TanStack Table — works in both Next App Router and TanStack Start. Needs shadcn (cn util + Button); the table/skeleton primitives are vendored here.",
+    "On Next.js, the component that builds the table (calls useReactTable) must be a client component ('use client')."
+  ]
+}

package/_stack/patterns/drizzle/pattern.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "../../pattern.schema.json",
+  "name": "drizzle",
+  "description": "Drizzle ORM + drizzle-kit (Postgres / node-postgres). DB client, schema barrel, cursor (keyset) pagination helpers and a seed harness.",
+  "framework": "tanstack-start",
+  "detect": {
+    "deps": [
+      "drizzle-orm"
+    ],
+    "files": [
+      "drizzle.config.ts"
+    ]
+  },
+  "dependsOn": [],
+  "deps": [
+    "drizzle-orm",
+    "pg"
+  ],
+  "devDeps": [
+    "drizzle-kit",
+    "dotenv",
+    "tsx",
+    "@types/pg",
+    "@faker-js/faker"
+  ],
+  "env": [
+    "DATABASE_URL"
+  ],
+  "scripts": {
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "drizzle-kit migrate",
+    "db:push": "drizzle-kit push",
+    "db:studio": "drizzle-kit studio",
+    "db:seed": "tsx src/server/db/seed.ts"
+  },
+  "files": [
+    {
+      "from": "apps/tanstack-base/drizzle.config.ts",
+      "to": "drizzle.config.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/db/index.ts",
+      "to": "<srcRoot>/server/db/index.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/db/keyset.ts",
+      "to": "<srcRoot>/server/db/keyset.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/db/seed.ts",
+      "to": "<srcRoot>/server/db/seed.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/db/schemas/index.ts",
+      "to": "<srcRoot>/server/db/schemas/index.ts"
+    }
+  ],
+  "notes": [
+    "drizzle.config.ts globs ./src/server/db/schemas/*.schema.ts — adjust the path if the project's source root is not ./src."
+  ]
+}

package/_stack/patterns/trpc/pattern.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "../../pattern.schema.json",
+  "name": "trpc",
+  "description": "tRPC v11 + TanStack React Query. Context with session injection, public/protected procedures, valibot error formatter, batch-stream client, SSR caller and a fetch route handler.",
+  "framework": "tanstack-start",
+  "detect": {
+    "deps": [
+      "@trpc/server"
+    ],
+    "files": []
+  },
+  "dependsOn": [
+    "drizzle"
+  ],
+  "integratesWith": [
+    "better-auth"
+  ],
+  "deps": [
+    "@trpc/server",
+    "@trpc/client",
+    "@trpc/tanstack-react-query",
+    "@tanstack/react-query",
+    "superjson",
+    "valibot"
+  ],
+  "env": [],
+  "files": [
+    {
+      "from": "apps/tanstack-base/src/server/api/trpc.ts",
+      "to": "<srcRoot>/server/api/trpc.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/api/root.ts",
+      "to": "<srcRoot>/server/api/root.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/server/api/routers/health.router.ts",
+      "to": "<srcRoot>/server/api/routers/health.router.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/routes/api.trpc.$.tsx",
+      "to": "<srcRoot>/routes/api.trpc.$.tsx"
+    },
+    {
+      "from": "apps/tanstack-base/src/trpc/react.tsx",
+      "to": "<srcRoot>/trpc/react.tsx"
+    },
+    {
+      "from": "apps/tanstack-base/src/trpc/query-client.ts",
+      "to": "<srcRoot>/trpc/query-client.ts"
+    },
+    {
+      "from": "apps/tanstack-base/src/trpc/server.ts",
+      "to": "<srcRoot>/trpc/server.ts"
+    }
+  ],
+  "notes": [
+    "trpc.ts integrates with better-auth: it imports `auth` and injects `session` into the context. If the better-auth pattern is NOT opt-in, strip those imports, the `session` from the context, and protectedProcedure — keep publicProcedure + the timing middleware.",
+    "Wire TRPCReactProvider + createQueryClient into the app's root route, and getServerHelpers for SSR preloading (see tanstack-base's router for the exact root wiring)."
+  ]
+}

package/_stack/patterns/trpc-next/pattern.json

@@ -0,0 +1,64 @@
+{
+  "$schema": "../../pattern.schema.json",
+  "name": "trpc-next",
+  "description": "tRPC v11 for Next.js App Router — the classic `api.x.useQuery` / `useMutation` hooks (createTRPCReact) plus RSC hydration (createHydrationHelpers). The Next counterpart of the `trpc` pattern.",
+  "framework": "next",
+  "detect": {
+    "deps": [
+      "@trpc/react-query"
+    ],
+    "files": []
+  },
+  "dependsOn": [
+    "drizzle"
+  ],
+  "integratesWith": [
+    "better-auth-next"
+  ],
+  "deps": [
+    "@trpc/server",
+    "@trpc/client",
+    "@trpc/react-query",
+    "@tanstack/react-query",
+    "superjson",
+    "valibot"
+  ],
+  "env": [],
+  "files": [
+    {
+      "from": "apps/next-base/src/server/api/trpc.ts",
+      "to": "<srcRoot>/server/api/trpc.ts"
+    },
+    {
+      "from": "apps/next-base/src/server/api/root.ts",
+      "to": "<srcRoot>/server/api/root.ts"
+    },
+    {
+      "from": "apps/next-base/src/server/api/routers/health.router.ts",
+      "to": "<srcRoot>/server/api/routers/health.router.ts"
+    },
+    {
+      "from": "apps/next-base/src/trpc/react.tsx",
+      "to": "<srcRoot>/trpc/react.tsx"
+    },
+    {
+      "from": "apps/next-base/src/trpc/query-client.ts",
+      "to": "<srcRoot>/trpc/query-client.ts"
+    },
+    {
+      "from": "apps/next-base/src/trpc/server.ts",
+      "to": "<srcRoot>/trpc/server.ts"
+    },
+    {
+      "from": "apps/next-base/src/app/api/trpc/[trpc]/route.ts",
+      "to": "<srcRoot>/app/api/trpc/[trpc]/route.ts"
+    }
+  ],
+  "wiring": [
+    "Wrap the app in <TRPCReactProvider> in app/layout.tsx (it's a client component)."
+  ],
+  "notes": [
+    "Client usage: `api.<router>.<proc>.useQuery()` / `.useMutation()` from ~/trpc/react. RSC usage: `import { api, HydrateClient } from '~/trpc/server'` for prefetch + hydrate.",
+    "trpc.ts context calls better-auth getSession; if better-auth-next is NOT opt-in, strip the auth import, `session` from the context, and protectedProcedure."
+  ]
+}

package/index.mjs

@@ -0,0 +1,216 @@
+#!/usr/bin/env node
+// create-stack — deterministic installer for the personal reference stack.
+// The non-LLM counterpart of the bootstrap skill's CREATE mode: fork a base
+// app, strip it to the selection, stamp identity, verify.
+//
+// Interactive by default. Non-interactive when any selection flag (or --yes) is
+// passed — useful for scripts/CI and for headless end-to-end testing:
+//   create-stack my-app --framework next --foundations drizzle,trpc --mailer ses --no-install
+
+import { resolve } from 'node:path'
+import * as p from '@clack/prompts'
+import { buildProject } from './lib/build.mjs'
+import { loadCapabilities, loadPatterns } from './lib/manifests.mjs'
+import { isDirEmpty, run } from './lib/util.mjs'
+
+// Capabilities baked into the base apps vs. the ones add-capability supplies.
+const BAKED_CAPS = new Set(['mailer', 'email-kit'])
+const ALL_FOUNDATIONS = ['drizzle', 'trpc', 'better-auth', 'data-table']
+
+const cancelled = (v) => {
+  if (p.isCancel(v)) {
+    p.cancel('Aborted.')
+    process.exit(0)
+  }
+  return v
+}
+
+/** Minimal flag parser: positional dir + --key value / --flag. */
+function parseArgs(argv) {
+  const out = { _: [], flags: {} }
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i]
+    if (a.startsWith('--')) {
+      const key = a.slice(2)
+      const next = argv[i + 1]
+      if (next && !next.startsWith('--')) {
+        out.flags[key] = next
+        i++
+      } else {
+        out.flags[key] = true
+      }
+    } else {
+      out._.push(a)
+    }
+  }
+  return out
+}
+
+const csv = (v) =>
+  typeof v === 'string'
+    ? v
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean)
+    : []
+
+/** Resolve hard deps + the mailer's better-auth requirement. */
+function normalize(picked, mailer) {
+  const kept = new Set(picked.filter((f) => ALL_FOUNDATIONS.includes(f)))
+  if (kept.has('trpc') || kept.has('better-auth')) kept.add('drizzle')
+  let mailerProvider = mailer ?? 'resend'
+  if (kept.has('better-auth') && mailerProvider === 'none') mailerProvider = 'resend'
+  return { kept, mailerProvider }
+}
+
+function collectFromFlags(args, capabilities) {
+  const argDir = args._[0]
+  if (!argDir) throw new Error('Project name is required (positional) in non-interactive mode')
+  const framework = args.flags.framework === 'next' ? 'next' : 'tanstack'
+  const picked = args.flags.foundations ? csv(args.flags.foundations) : [...ALL_FOUNDATIONS]
+  const { kept, mailerProvider } = normalize(picked, args.flags.mailer)
+  const validCaps = new Set(Object.keys(capabilities).filter((c) => !BAKED_CAPS.has(c)))
+  const extraCaps = csv(args.flags.caps).filter((c) => validCaps.has(c))
+  const doInstall = !args.flags['no-install']
+  return { argDir, projectName: argDir, framework, kept, mailerProvider, extraCaps, doInstall }
+}
+
+async function collectFromPrompts(argDir, capabilities) {
+  p.intro('create-stack — fork a base app, strip it to your selection')
+
+  const name = cancelled(
+    await p.text({
+      message: 'Project name',
+      placeholder: 'my-app',
+      initialValue: argDir ?? '',
+      validate: (v) => (v?.trim() ? undefined : 'Required'),
+    }),
+  )
+  const projectName = name.trim()
+
+  const framework = cancelled(
+    await p.select({
+      message: 'Framework',
+      options: [
+        { value: 'tanstack', label: 'TanStack Start' },
+        { value: 'next', label: 'Next.js (App Router)' },
+      ],
+    }),
+  )
+
+  const picked = cancelled(
+    await p.multiselect({
+      message: 'Foundations (space to toggle)',
+      required: false,
+      initialValues: [...ALL_FOUNDATIONS],
+      options: [
+        { value: 'drizzle', label: 'Drizzle ORM', hint: 'Postgres + seed' },
+        { value: 'trpc', label: 'tRPC', hint: 'needs Drizzle' },
+        { value: 'better-auth', label: 'better-auth', hint: 'needs Drizzle + mailer' },
+        { value: 'data-table', label: 'Data tables', hint: 'TanStack Table' },
+      ],
+    }),
+  )
+  const authKept = new Set(picked).has('better-auth')
+
+  const mailerOpts = [
+    { value: 'resend', label: 'Resend' },
+    { value: 'brevo', label: 'Brevo' },
+    { value: 'ses', label: 'Amazon SES' },
+  ]
+  if (!authKept) mailerOpts.push({ value: 'none', label: 'None' })
+  const mailer = cancelled(
+    await p.select({
+      message: authKept ? 'Mailer provider (required by better-auth)' : 'Mailer provider',
+      options: mailerOpts,
+      initialValue: 'resend',
+    }),
+  )
+
+  const extraCaps = cancelled(
+    await p.multiselect({
+      message: 'Extra capabilities (optional — added via add-capability)',
+      required: false,
+      initialValues: [],
+      options: Object.keys(capabilities)
+        .filter((c) => !BAKED_CAPS.has(c))
+        .map((c) => ({ value: c, label: c, hint: capabilities[c].description?.slice(0, 40) })),
+    }),
+  )
+
+  const doInstall = cancelled(
+    await p.confirm({ message: 'Install dependencies and verify now?', initialValue: true }),
+  )
+
+  const { kept, mailerProvider } = normalize(picked, mailer)
+  return { argDir, projectName, framework, kept, mailerProvider, extraCaps, doInstall }
+}
+
+function execute(a, patterns) {
+  const projectDir = resolve(process.cwd(), a.argDir ?? a.projectName)
+  if (!isDirEmpty(projectDir)) {
+    p.cancel(`Target directory is not empty: ${projectDir}`)
+    process.exit(1)
+  }
+
+  const s = p.spinner()
+  s.start('Forking + stripping the base app')
+  buildProject({ ...a, projectDir, patterns })
+  s.stop('Project scaffolded')
+
+  if (a.doInstall) {
+    p.log.step('pnpm install')
+    run('pnpm', ['install'], { cwd: projectDir })
+    p.log.step('Verifying (typecheck + biome)')
+    const tc = run('pnpm', ['--config.verify-deps-before-run=false', 'run', 'typecheck'], {
+      cwd: projectDir,
+    })
+    const lint = run('pnpm', ['--config.verify-deps-before-run=false', 'run', 'check'], {
+      cwd: projectDir,
+    })
+    p.log[tc && lint ? 'success' : 'warn'](
+      tc && lint ? 'typecheck + biome clean' : 'verify reported issues (see output above)',
+    )
+  }
+
+  const keptMailer = a.mailerProvider !== 'none'
+  const lines = [
+    `Framework: ${a.framework === 'next' ? 'Next.js' : 'TanStack Start'}`,
+    `Foundations: ${[...a.kept].sort().join(', ') || '(none)'}`,
+    `Mailer: ${keptMailer ? a.mailerProvider : '(none)'}`,
+  ]
+  if (a.extraCaps.length) {
+    lines.push(
+      '',
+      'Add the extra capabilities with the add-capability skill:',
+      ...a.extraCaps.map((c) => `  • ${c}`),
+    )
+  }
+  lines.push('', 'Next:', `  cd ${a.argDir ?? a.projectName}`)
+  if (!a.doInstall) lines.push('  pnpm install')
+  lines.push('  cp .env.example .env   # fill in the values', '  pnpm dev')
+  p.note(lines.join('\n'), 'Done')
+  p.outro(`Created ${a.projectName}`)
+}
+
+async function main() {
+  const patterns = loadPatterns()
+  const capabilities = loadCapabilities()
+  const args = parseArgs(process.argv.slice(2))
+
+  const nonInteractive =
+    args.flags.yes ||
+    args.flags.y ||
+    ['framework', 'foundations', 'mailer', 'caps', 'no-install'].some((k) => k in args.flags)
+
+  const answers = nonInteractive
+    ? collectFromFlags(args, capabilities)
+    : await collectFromPrompts(args._[0], capabilities)
+
+  execute(answers, patterns)
+}
+
+main().catch((err) => {
+  p.log.error(String(err?.stack || err))
+  process.exit(1)
+})

package/lib/build.mjs

@@ -0,0 +1,64 @@
+// Pure build phase (no prompts, no install) — fork → strip → mailer → env →
+// identity. Shared by index.mjs (after the wizard) and the test harness.
+
+import { writeEnv } from './env.mjs'
+import { stampIdentity } from './identity.mjs'
+import { swapMailer } from './mailer.mjs'
+import { forkBase, makeStandalone } from './scaffold.mjs'
+import { stripFoundations } from './strip.mjs'
+import { join, pkgAddDeps, pkgRemoveDeps, pkgRemoveScripts, readJSON, writeJSON } from './util.mjs'
+
+/**
+ * @param {object} o
+ * @param {string} o.projectDir  absolute target dir (must be empty)
+ * @param {string} o.projectName
+ * @param {'next'|'tanstack'} o.framework
+ * @param {Set<string>} o.kept   logical foundations to keep (deps pre-resolved)
+ * @param {'resend'|'brevo'|'ses'|'none'} o.mailerProvider
+ * @param {object} o.patterns    loadPatterns()
+ * @returns {{ kept: string[], keptMailer: boolean, mailerProvider: string, envKeys: string[] }}
+ */
+export function buildProject({
+  projectDir,
+  projectName,
+  framework,
+  kept,
+  mailerProvider,
+  patterns,
+}) {
+  const authKept = kept.has('better-auth')
+  const keptMailer = mailerProvider !== 'none'
+
+  forkBase(framework, projectDir)
+  makeStandalone(projectDir, projectName)
+
+  const strip = stripFoundations({ projectDir, framework, kept, keptMailer, patterns })
+  const mailer = keptMailer
+    ? swapMailer(projectDir, mailerProvider)
+    : { addDeps: {}, removeDeps: [], envKeys: [] }
+
+  const pkgPath = join(projectDir, 'package.json')
+  const pkg = readJSON(pkgPath)
+  pkg.description = `${projectName} — bootstrapped from the personal reference stack.`
+  pkgRemoveDeps(pkg, [...strip.removeDeps, ...mailer.removeDeps])
+  pkgRemoveScripts(pkg, strip.removeScripts)
+  pkgAddDeps(pkg, mailer.addDeps)
+  writeJSON(pkgPath, pkg)
+
+  const envKeys = []
+  if (kept.has('drizzle')) envKeys.push('DATABASE_URL')
+  if (authKept) {
+    envKeys.push(
+      'BETTER_AUTH_URL',
+      'BETTER_AUTH_SECRET',
+      'BETTER_AUTH_GOOGLE_CLIENT_ID',
+      'BETTER_AUTH_GOOGLE_CLIENT_SECRET',
+    )
+  }
+  envKeys.push(...mailer.envKeys)
+  writeEnv(projectDir, envKeys)
+
+  stampIdentity(projectDir, projectName, framework)
+
+  return { kept: [...kept], keptMailer, mailerProvider, envKeys }
+}