@digilogiclabs/create-saas-app 2.0.0 → 2.2.0

package/dist/generators/template-generator.d.ts

@@ -25,6 +25,7 @@ export interface TemplateContext {
         ai: boolean;
         observability: boolean;
         workers: boolean;
+        beta: boolean;
     };
     packageName: string;
     className: string;
@@ -62,6 +63,16 @@ export declare class TemplateGenerator {
     private copyTemplate;
     private copyAndProcessFiles;
     private copySharedResources;
+    /**
+     * Patch the generated package.json to merge aligned dependency versions.
+     * Base templates may have stale versions — this ensures the output
+     * always matches production-aligned versions from getDependencies().
+     */
+    private patchPackageJson;
+    /**
+     * Generate .env.example dynamically based on auth, database, and tier selections.
+     */
+    private generateEnvExample;
     private protectJSXObjectLiterals;
     private isJSXObjectLiteral;
     private isTextFile;

package/dist/generators/template-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template-generator.d.ts","sourceRoot":"","sources":["../../src/generators/template-generator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAyDpE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE;QACF,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,QAAQ,EAAE;QACR,YAAY,EAAE,OAAO,CAAC;QACtB,MAAM,EAAE,OAAO,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC;QACd,QAAQ,EAAE,OAAO,CAAC;QAClB,EAAE,EAAE,OAAO,CAAC;QACZ,aAAa,EAAE,OAAO,CAAC;QACvB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,YAAY,CAAS;gBAEjB,MAAM,EAAE,aAAa;IASjC,OAAO,CAAC,qBAAqB;IAyE7B,OAAO,CAAC,eAAe;IA2GvB,OAAO,CAAC,kBAAkB;IA4B1B,OAAO,CAAC,UAAU;IAwBL,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAyB1C,kBAAkB;YAKlB,qBAAqB;YA4BrB,YAAY;YASZ,mBAAmB;YA2EnB,mBAAmB;IAsBjC,OAAO,CAAC,wBAAwB;IAqDhC,OAAO,CAAC,kBAAkB;IAoB1B,OAAO,CAAC,UAAU;IA6BlB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,WAAW;YAQL,kBAAkB;CAmBjC"}
+{"version":3,"file":"template-generator.d.ts","sourceRoot":"","sources":["../../src/generators/template-generator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AA8DpE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE;QACF,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,QAAQ,EAAE;QACR,YAAY,EAAE,OAAO,CAAC;QACtB,MAAM,EAAE,OAAO,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC;QACd,QAAQ,EAAE,OAAO,CAAC;QAClB,EAAE,EAAE,OAAO,CAAC;QACZ,aAAa,EAAE,OAAO,CAAC;QACvB,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,EAAE,OAAO,CAAC;KACf,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,YAAY,CAAS;gBAEjB,MAAM,EAAE,aAAa;IASjC,OAAO,CAAC,qBAAqB;IAyE7B,OAAO,CAAC,eAAe;IAuKvB,OAAO,CAAC,kBAAkB;IAiC1B,OAAO,CAAC,UAAU;IAwBL,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YA4B1C,kBAAkB;YAKlB,qBAAqB;YA4BrB,YAAY;YASZ,mBAAmB;YA2EnB,mBAAmB;IAwQjC;;;;OAIG;YACW,gBAAgB;IAyB9B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAyH1B,OAAO,CAAC,wBAAwB;IAqDhC,OAAO,CAAC,kBAAkB;IAoB1B,OAAO,CAAC,UAAU;IAmClB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,WAAW;YAQL,kBAAkB;CAmBjC"}

package/dist/generators/template-generator.js

@@ -22,6 +22,7 @@ const TIER_FEATURES = {
         ai: false,
         observability: false,
         workers: false,
+        beta: true,
     },
     starter: {
         platformCore: true,
@@ -31,6 +32,7 @@ const TIER_FEATURES = {
         ai: false,
         observability: false,
         workers: false,
+        beta: true,
     },
     pro: {
         platformCore: true,
@@ -40,6 +42,7 @@ const TIER_FEATURES = {
         ai: true,
         observability: true,
         workers: false,
+        beta: true,
     },
     enterprise: {
         platformCore: true,
@@ -49,6 +52,7 @@ const TIER_FEATURES = {
         ai: true,
         observability: true,
         workers: true,
+        beta: true,
     },
 };
 class TemplateGenerator {
@@ -135,7 +139,7 @@ class TemplateGenerator {
         // ═══════════════════════════════════════════════════════════════
         // Platform Core - Always included for all tiers (infrastructure abstraction)
         if (features.platformCore) {
-            baseDeps['@digilogiclabs/platform-core'] = '^1.1.0';
+            baseDeps['@digilogiclabs/platform-core'] = '^1.10.0';
         }
         // App SDK - Always included for React apps (unified hooks)
         if (features.appSdk && (this.config.platform === 'web' || this.config.platform === 'both')) {
@@ -150,36 +154,59 @@ class TemplateGenerator {
             'ui-auth-payments-video',
             'ui-auth-payments-ai',
             'ui-auth-payments-ai-rag',
+            // New vertical templates
+            'micro-saas',
+            'marketplace',
+            'ai-platform',
+            'iot-dashboard',
         ].includes(this.config.template)) {
-            baseDeps['@digilogiclabs/saas-factory-ui'] = '^1.0.1';
+            baseDeps['@digilogiclabs/saas-factory-ui'] = '^1.1.0';
         }
         // Auth package (tier: micro+)
         if (features.auth && this.config.template !== 'base' && this.config.template !== 'ui-only') {
-            baseDeps['@digilogiclabs/saas-factory-auth'] = '^1.0.0';
+            baseDeps['@digilogiclabs/saas-factory-auth'] = '^3.0.0';
         }
         // Payments package (tier: starter+)
         if (features.payments &&
             (this.config.template.includes('payments') || ['starter', 'pro', 'enterprise'].includes(tier))) {
-            baseDeps['@digilogiclabs/saas-factory-payments'] = '^1.0.0';
+            baseDeps['@digilogiclabs/saas-factory-payments'] = '^3.0.0';
         }
-        // AI packages (tier: pro+)
-        if (features.ai && (this.config.ai.enabled || this.config.template.includes('-ai'))) {
-            baseDeps['@digilogiclabs/saas-factory-ai'] = '^1.0.0';
+        // AI packages (tier: pro+ or AI-focused templates)
+        if (features.ai &&
+            (this.config.ai.enabled ||
+                this.config.template.includes('-ai') ||
+                this.config.template === 'ai-platform')) {
+            baseDeps['@digilogiclabs/saas-factory-ai'] = '^6.0.0';
             baseDeps['@digilogiclabs/saas-factory-ai-types'] = '^1.0.0';
+            // Add AI SDK for ai-platform template
+            if (this.config.template === 'ai-platform') {
+                baseDeps['ai'] = '^4.0.0';
+                baseDeps['@ai-sdk/openai'] = '^1.0.0';
+                baseDeps['@ai-sdk/anthropic'] = '^1.0.0';
+            }
+        }
+        // IoT Dashboard specific dependencies
+        if (this.config.template === 'iot-dashboard') {
+            baseDeps['recharts'] = '^2.14.0';
+            baseDeps['date-fns'] = '^4.1.0';
+        }
+        // Marketplace specific dependencies
+        if (this.config.template === 'marketplace') {
+            baseDeps['stripe'] = '^17.4.0';
         }
         // ═══════════════════════════════════════════════════════════════
         // PLATFORM DEPENDENCIES (web/mobile)
         // ═══════════════════════════════════════════════════════════════
         if (this.config.platform === 'web' || this.config.platform === 'both') {
             Object.assign(baseDeps, {
-                next: '^15.0.0',
+                next: '^15.5.0',
                 react: '^19.0.0',
                 'react-dom': '^19.0.0',
                 tailwindcss: '^4.0.0',
-                typescript: '^5.7.0',
-                clsx: '^2.0.0',
+                typescript: '^5.8.0',
+                clsx: '^2.1.0',
                 'class-variance-authority': '^0.7.0',
-                'tailwind-merge': '^2.0.0',
+                'tailwind-merge': '^2.6.0',
                 'next-themes': '^0.4.0',
                 'lucide-react': '^0.460.0',
             });
@@ -213,6 +240,34 @@ class TemplateGenerator {
                 baseDeps['@supabase/ssr'] = '^0.5.0';
             }
         }
+        else if (this.config.auth === 'keycloak') {
+            if (this.config.platform === 'web' || this.config.platform === 'both') {
+                baseDeps['next-auth'] = '^5.0.0-beta.30';
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // INFRASTRUCTURE DEPENDENCIES
+        // ═══════════════════════════════════════════════════════════════
+        // Redis (starter+ tiers — rate limiting, caching)
+        if (features.payments || features.ai || features.observability) {
+            baseDeps['ioredis'] = '^5.6.0';
+        }
+        // Database (PostgreSQL + Drizzle)
+        if (this.config.database === 'postgresql') {
+            baseDeps['drizzle-orm'] = '^0.43.0';
+            baseDeps['postgres'] = '^3.4.0';
+            baseDeps['dotenv'] = '^16.4.0';
+        }
+        // Stripe (starter+ tiers — payments)
+        if (features.payments) {
+            baseDeps['stripe'] = '^17.4.0';
+        }
+        // Resend (starter+ tiers — transactional email)
+        if (features.payments) {
+            baseDeps['resend'] = '^4.0.0';
+        }
+        // Server-only guard
+        baseDeps['server-only'] = '^0.0.1';
         return baseDeps;
     }
     getDevDependencies() {
@@ -228,6 +283,10 @@ class TemplateGenerator {
                 '@types/react-dom': '^19.0.0',
             });
         }
+        // Drizzle Kit for PostgreSQL
+        if (this.config.database === 'postgresql') {
+            baseDeps['drizzle-kit'] = '^0.30.0';
+        }
         // Add testing dependencies for pro+ tiers
         const tier = this.config.tier || 'starter';
         if (['pro', 'enterprise'].includes(tier)) {
@@ -276,6 +335,8 @@ class TemplateGenerator {
             }
             // Copy shared resources
             await this.copySharedResources(outputPath);
+            // Patch package.json with aligned dependency versions
+            await this.patchPackageJson(outputPath);
             logger_1.logger.debug('Template generation completed');
         }
         catch (error) {
@@ -393,15 +454,319 @@ class TemplateGenerator {
             return;
         }
         const sharedPath = path_1.default.join(this.templatesDir, 'shared');
-        // Copy auth configuration
-        const authPath = path_1.default.join(sharedPath, 'auth', this.config.auth);
-        await this.copyAndProcessFiles(authPath, outputPath);
-        // Copy theme configuration
+        const isWeb = this.config.platform === 'web' || this.config.platform === 'both';
+        const tier = this.config.tier || 'starter';
+        const features = TIER_FEATURES[tier];
+        // ═══════════════════════════════════════════════════════════════
+        // AUTH — provider-specific config (Keycloak: auth.config.ts + auth.ts + federated-logout)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const authPath = path_1.default.join(sharedPath, 'auth', this.config.auth, 'web');
+            await this.copyAndProcessFiles(authPath, outputPath);
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // DATABASE — provider-specific setup (PostgreSQL/Drizzle or Supabase)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const dbPath = path_1.default.join(sharedPath, 'database', this.config.database, 'web');
+            await this.copyAndProcessFiles(dbPath, outputPath);
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // THEME — theme-specific configuration
+        // ═══════════════════════════════════════════════════════════════
         const themePath = path_1.default.join(sharedPath, 'themes', this.config.theme);
         await this.copyAndProcessFiles(themePath, outputPath);
-        // Copy database configuration
-        const dbPath = path_1.default.join(sharedPath, 'database', this.config.database);
-        await this.copyAndProcessFiles(dbPath, outputPath);
+        // ═══════════════════════════════════════════════════════════════
+        // BETA GATE — all tiers (API routes + client wrapper)
+        // ═══════════════════════════════════════════════════════════════
+        if (features.beta && isWeb) {
+            const betaPath = path_1.default.join(sharedPath, 'beta', 'web');
+            if (await fs_extra_1.default.pathExists(betaPath)) {
+                await this.copyAndProcessFiles(betaPath, path_1.default.join(outputPath, 'src'));
+                logger_1.logger.debug('Copied beta gate templates');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // ENVIRONMENT CONFIG — centralized env validation (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const configPath = path_1.default.join(sharedPath, 'config', 'web');
+            if (await fs_extra_1.default.pathExists(configPath)) {
+                await this.copyAndProcessFiles(configPath, outputPath);
+                logger_1.logger.debug('Copied environment config template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // REDIS — client + rate limit store (starter+ tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb && (features.payments || features.ai || features.observability)) {
+            const redisPath = path_1.default.join(sharedPath, 'redis', 'web');
+            if (await fs_extra_1.default.pathExists(redisPath)) {
+                await this.copyAndProcessFiles(redisPath, outputPath);
+                logger_1.logger.debug('Copied Redis client template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // API SECURITY — wrapper + rate limiting (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const securityPath = path_1.default.join(sharedPath, 'security', 'web');
+            if (await fs_extra_1.default.pathExists(securityPath)) {
+                await this.copyAndProcessFiles(securityPath, outputPath);
+                logger_1.logger.debug('Copied API security wrapper template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // MIDDLEWARE — route protection + auth (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb && this.config.auth === 'keycloak') {
+            const middlewarePath = path_1.default.join(sharedPath, 'middleware', 'web');
+            if (await fs_extra_1.default.pathExists(middlewarePath)) {
+                await this.copyAndProcessFiles(middlewarePath, outputPath);
+                logger_1.logger.debug('Copied middleware template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // HEALTH CHECK — container readiness (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const healthPath = path_1.default.join(sharedPath, 'health', 'web');
+            if (await fs_extra_1.default.pathExists(healthPath)) {
+                await this.copyAndProcessFiles(healthPath, outputPath);
+                logger_1.logger.debug('Copied health check endpoint template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // STRIPE WEBHOOKS — payment lifecycle (starter+ tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb && features.payments) {
+            const paymentsPath = path_1.default.join(sharedPath, 'payments', 'web');
+            if (await fs_extra_1.default.pathExists(paymentsPath)) {
+                await this.copyAndProcessFiles(paymentsPath, outputPath);
+                logger_1.logger.debug('Copied Stripe webhook handler template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // AUDIT LOGGING — admin visibility (all authenticated apps)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb && features.auth) {
+            const auditPath = path_1.default.join(sharedPath, 'audit', 'web');
+            if (await fs_extra_1.default.pathExists(auditPath)) {
+                await this.copyAndProcessFiles(auditPath, outputPath);
+                logger_1.logger.debug('Copied audit logging template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // EMAIL BRANDING — transactional emails (all authenticated apps)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb && features.auth) {
+            const emailPath = path_1.default.join(sharedPath, 'email', 'web');
+            if (await fs_extra_1.default.pathExists(emailPath)) {
+                await this.copyAndProcessFiles(emailPath, outputPath);
+                logger_1.logger.debug('Copied email branding template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // PLATFORM-CORE INIT — singleton adapter wiring (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const platformPath = path_1.default.join(sharedPath, 'platform', 'web');
+            if (await fs_extra_1.default.pathExists(platformPath)) {
+                await this.copyAndProcessFiles(platformPath, outputPath);
+                logger_1.logger.debug('Copied platform-core initialization template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // LEGAL PAGES — Terms of Service + Privacy Policy (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const legalPath = path_1.default.join(sharedPath, 'legal', 'web');
+            if (await fs_extra_1.default.pathExists(legalPath)) {
+                await this.copyAndProcessFiles(legalPath, outputPath);
+                logger_1.logger.debug('Copied legal page templates (terms, privacy)');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // ERROR PAGES — 404, error boundary, global error (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const errorPagesPath = path_1.default.join(sharedPath, 'error-pages', 'web');
+            if (await fs_extra_1.default.pathExists(errorPagesPath)) {
+                await this.copyAndProcessFiles(errorPagesPath, outputPath);
+                logger_1.logger.debug('Copied error page templates (not-found, error, global-error)');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // SEO — sitemap.ts + robots.ts (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const seoPath = path_1.default.join(sharedPath, 'seo', 'web');
+            if (await fs_extra_1.default.pathExists(seoPath)) {
+                await this.copyAndProcessFiles(seoPath, outputPath);
+                logger_1.logger.debug('Copied SEO templates (sitemap, robots)');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // UTILS — common utility functions + API response helpers (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const utilsPath = path_1.default.join(sharedPath, 'utils', 'web');
+            if (await fs_extra_1.default.pathExists(utilsPath)) {
+                await this.copyAndProcessFiles(utilsPath, outputPath);
+                logger_1.logger.debug('Copied utility templates (utils, api-response)');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // COOKIE CONSENT — GDPR compliance banner (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const cookiePath = path_1.default.join(sharedPath, 'cookie-consent', 'web');
+            if (await fs_extra_1.default.pathExists(cookiePath)) {
+                await this.copyAndProcessFiles(cookiePath, outputPath);
+                logger_1.logger.debug('Copied cookie consent component template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // OBSERVABILITY — audit + error reporting helpers (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const obsPath = path_1.default.join(sharedPath, 'observability', 'web');
+            if (await fs_extra_1.default.pathExists(obsPath)) {
+                await this.copyAndProcessFiles(obsPath, outputPath);
+                logger_1.logger.debug('Copied observability template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // CACHE — TTL presets + HTTP cache headers (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const cachePath = path_1.default.join(sharedPath, 'cache', 'web');
+            if (await fs_extra_1.default.pathExists(cachePath)) {
+                await this.copyAndProcessFiles(cachePath, outputPath);
+                logger_1.logger.debug('Copied cache utility template');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // LOADING — skeleton components + default loading.tsx (all tiers)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const loadingPath = path_1.default.join(sharedPath, 'loading', 'web');
+            if (await fs_extra_1.default.pathExists(loadingPath)) {
+                await this.copyAndProcessFiles(loadingPath, outputPath);
+                logger_1.logger.debug('Copied loading skeleton templates');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // ADMIN — layout + nav component (keycloak auth only)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb && this.config.auth === 'keycloak') {
+            const adminPath = path_1.default.join(sharedPath, 'admin', 'web');
+            if (await fs_extra_1.default.pathExists(adminPath)) {
+                await this.copyAndProcessFiles(adminPath, outputPath);
+                logger_1.logger.debug('Copied admin layout + nav templates');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // CONTACT FORM — page + API route with Zod validation & email (all authenticated apps)
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb && features.auth) {
+            const contactPath = path_1.default.join(sharedPath, 'contact', 'web');
+            if (await fs_extra_1.default.pathExists(contactPath)) {
+                await this.copyAndProcessFiles(contactPath, outputPath);
+                logger_1.logger.debug('Copied contact form templates (page + API route)');
+            }
+        }
+        // ═══════════════════════════════════════════════════════════════
+        // .env.example — dynamic env var reference
+        // ═══════════════════════════════════════════════════════════════
+        if (isWeb) {
+            const envExample = this.generateEnvExample(features);
+            await fs_extra_1.default.writeFile(path_1.default.join(outputPath, '.env.example'), envExample);
+            logger_1.logger.debug('Generated .env.example');
+        }
+    }
+    /**
+     * Patch the generated package.json to merge aligned dependency versions.
+     * Base templates may have stale versions — this ensures the output
+     * always matches production-aligned versions from getDependencies().
+     */
+    async patchPackageJson(outputPath) {
+        const pkgPath = path_1.default.join(outputPath, 'package.json');
+        if (!(await fs_extra_1.default.pathExists(pkgPath)))
+            return;
+        const pkg = await fs_extra_1.default.readJson(pkgPath);
+        const deps = this.context.dependencies;
+        const devDeps = this.context.devDependencies;
+        // Merge dependencies — our versions take precedence over template defaults
+        pkg.dependencies = { ...(pkg.dependencies || {}), ...deps };
+        pkg.devDependencies = { ...(pkg.devDependencies || {}), ...devDeps };
+        // Clean up any obsolete/duplicate deps that moved between deps and devDeps
+        // (e.g., typescript might be in both)
+        for (const key of Object.keys(pkg.devDependencies)) {
+            if (key === 'typescript')
+                continue; // typescript can be in both
+            if (pkg.dependencies[key]) {
+                delete pkg.devDependencies[key];
+            }
+        }
+        await fs_extra_1.default.writeJson(pkgPath, pkg, { spaces: 2 });
+        logger_1.logger.debug('Patched package.json with aligned dependency versions');
+    }
+    /**
+     * Generate .env.example dynamically based on auth, database, and tier selections.
+     */
+    generateEnvExample(features) {
+        const lines = [
+            '# ═══════════════════════════════════════════════════════════════',
+            `# ${this.config.name} — Environment Variables`,
+            '# Copy this file to .env.local and fill in the values.',
+            '# ═══════════════════════════════════════════════════════════════',
+            '',
+            '# ── App ──────────────────────────────────────────────────────',
+            'NODE_ENV=development',
+            'NEXT_PUBLIC_APP_URL=http://localhost:3000',
+            '',
+        ];
+        // Auth
+        if (this.config.auth === 'keycloak') {
+            lines.push('# ── Auth (Keycloak + Auth.js) ─────────────────────────────────', 'AUTH_SECRET=                        # openssl rand -base64 32', 'KEYCLOAK_ISSUER=https://auth.example.com/realms/my-realm', 'KEYCLOAK_CLIENT_ID=my-app', 'KEYCLOAK_CLIENT_SECRET=', '');
+        }
+        else if (this.config.auth === 'supabase') {
+            lines.push('# ── Auth (Supabase) ───────────────────────────────────────────', 'NEXT_PUBLIC_SUPABASE_URL=https://xxx.supabase.co', 'NEXT_PUBLIC_SUPABASE_ANON_KEY=', 'SUPABASE_SERVICE_ROLE_KEY=', '');
+        }
+        else if (this.config.auth === 'firebase') {
+            lines.push('# ── Auth (Firebase) ───────────────────────────────────────────', 'NEXT_PUBLIC_FIREBASE_API_KEY=', 'NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=', 'NEXT_PUBLIC_FIREBASE_PROJECT_ID=', '');
+        }
+        // Database
+        if (this.config.database === 'postgresql') {
+            lines.push('# ── Database (PostgreSQL) ─────────────────────────────────────', 'DATABASE_URL=postgres://user:password@localhost:5432/myapp', '');
+        }
+        else if (this.config.database === 'supabase') {
+            lines.push('# ── Database (Supabase) ───────────────────────────────────────', 'NEXT_PUBLIC_SUPABASE_URL=https://xxx.supabase.co', 'NEXT_PUBLIC_SUPABASE_ANON_KEY=', 'SUPABASE_SERVICE_ROLE_KEY=', '');
+        }
+        // Redis (starter+)
+        if (features.payments || features.ai || features.observability) {
+            lines.push('# ── Cache (Redis) ─────────────────────────────────────────────', 'REDIS_URL=redis://localhost:6379', 'REDIS_KEY_PREFIX=myapp:            # Isolate keys per app', '');
+        }
+        // Payments (starter+)
+        if (features.payments) {
+            lines.push('# ── Payments (Stripe) ─────────────────────────────────────────', 'STRIPE_PUBLISHABLE_KEY=pk_test_...', 'STRIPE_SECRET_KEY=sk_test_...', 'STRIPE_WEBHOOK_SECRET=whsec_...', '');
+        }
+        // Email (all authenticated apps)
+        if (features.auth) {
+            lines.push('# ── Email (Resend) ────────────────────────────────────────────', 'RESEND_API_KEY=re_...', 'EMAIL_FROM=noreply@example.com', 'ADMIN_EMAIL=admin@example.com       # Contact form submissions', '');
+        }
+        // AI (pro+)
+        if (features.ai) {
+            lines.push('# ── AI ────────────────────────────────────────────────────────', 'OPENAI_API_KEY=sk-...', '# ANTHROPIC_API_KEY=sk-ant-...', '');
+        }
+        // Admin / Cron secrets
+        lines.push('# ── Security ──────────────────────────────────────────────────', 'ADMIN_SECRET=                      # openssl rand -base64 32', 'CRON_SECRET=                       # openssl rand -base64 32', '');
+        // Beta (if enabled)
+        if (features.beta) {
+            lines.push('# ── Beta Access ───────────────────────────────────────────────', 'BETA_ENABLED=true', 'BETA_CODES=CODE1,CODE2            # Comma-separated invite codes', '');
+        }
+        return lines.join('\n');
     }
     protectJSXObjectLiterals(content, jsxObjectLiterals) {
         let result = '';
@@ -488,12 +853,18 @@ class TemplateGenerator {
             '.scss',
             '.sass',
             '.less',
+            '.mjs',
+            '.cjs',
             '.env',
             '.gitignore',
             '.eslintrc',
             '.prettierrc',
             '.editorconfig',
             '.nvmrc',
+            // Infrastructure files (Terraform, Kubernetes)
+            '.tf',
+            '.tfvars',
+            '.hcl',
         ];
         const ext = path_1.default.extname(filename).toLowerCase();
         return textExtensions.includes(ext) || !ext;