@escalay/kit 0.0.0-stage → 1.7.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Escalay
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,134 @@
-# Temporary Holding Version
+# api-kit
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Hono + zod OpenAPI 3.1 APIs that agents can use without help: HAL links, problem+json errors, cursor pages, ETags,
+per-client API keys and OAuth, discovery documents, an `llms.txt` guide whose code-derived parts are generated,
+skills, an MCP server (spec 2026-07-28) and A2A over the same routes, a database layer on Drizzle, search by words,
+picture and likeness over embeddings, and the headless browser side of all of it.
+
+It ships as **parts you copy into your app**, shadcn-style: the app owns the code, `kit.json` records what came from
+which kit version, and the CLI shows your edits next to the kit's changes. Every part carries its own README, so
+the practices travel with the copy into `src/kit/<part>/README.md`.
+
+| Word | Means |
+|---|---|
+| **part** | one installable unit (`core`, `mcp`, `boards`); the code calls it a module |
+| **kit** | the set of parts in one repo: this one is `escalay/api-kit`, on npm as `@escalay/kit` |
+| **preset** | a starting combination of parts; `api` is the one `init` has today |
+
+## Start a new API
+
+```bash
+npm create escalay my-api                        # the `api` preset, with an example `notes` feature
+cd my-api && pnpm install && pnpm test && pnpm dev   # http://localhost:4400/docs, /llms.txt, /mcp
+npx @escalay/kit feature reading-lists           # a new feature folder, listed and tested
+```
+
+`npm create escalay my-api -- --runtime node --title "My API"` passes flags on: `--runtime both|cloudflare|node`
+(default `both`), `--preset api`, `--bare` (no example feature), `--yes` (it never asks; accepted for scripts).
+`--preset selfhosted` is not built yet: it arrives with `escalay/selfhost-kit`.
+
+What `init` makes:
+
+```
+src/server.ts            Node: env → openDb → createApp → listen
+src/worker.ts            Workers: D1 → openDb → the same createApp (wrangler.jsonc, migrations/ for D1)
+src/app.ts               the wiring only: auth + OAuth, every feature, the guide, MCP
+src/features/index.ts    FEATURES, the one list (and the Feature shape)
+src/features/<name>/     schema.ts · repo.ts · routes.ts · handlers.ts · tools.ts · index.ts · <name>.test.ts
+src/kit/                 the copied kit (kit.json + a README per part)
+guide/                   llms.txt and agents/*.md templates; {{api.endpoints}} and {{mcp.tools}} are generated
+test/api.test.ts         every route linted, every MCP tool run (toolsRun), every guide placeholder filled
+container/entrypoint.sh  the env allowlist: the API sees only the variables it reads
+```
+
+## The practices it enforces
+
+1. **One shape per feature.** `schema.ts` (Drizzle tables + migration steps) · `repo.ts` (the only queries) ·
+   `routes.ts` (contracts) · `handlers.ts` (request → repo → HAL) · `tools.ts` (MCP tools) · `index.ts`. The kit's
+   own [`boards`](src/boards/README.md) is the reference.
+2. **Only repos touch the database.** Moving off the local SQLite file (Turso, D1) changes how `openDb` is called,
+   not the queries. A migration step never changes once it has run; existing tables are adopted with step 1.
+3. **The API is the contract.** Every route documented (camelCase ids, descriptions an agent chooses by, examples,
+   problem+json errors); unknown query parameters answer 400; errors say what to do next.
+4. **MCP and A2A are thin calls to the routes**, so they can't drift; every tool runs in the tests (`toolsRun`).
+5. **The guide writes only what the code can't know**; endpoint and tool lists are generated placeholders.
+6. **Money is bounded**: embeddings and model calls go through ledgers that never pay twice, with budgets and capped
+   keys; slow work answers 202 with a run.
+7. **Private by default where it should be**: `private: true` hides everything behind credentials and says `noindex`.
+
+The full standard: [docs/STANDARD.md](docs/STANDARD.md). Why the layout is what it is:
+[docs/decisions/0001](docs/decisions/0001-features-drizzle-scaffold.md).
+
+## Parts
+
+| Part | What | README |
+|---|---|---|
+| `core` | `createAgentApi`: OpenAPI 3.1 + Scalar, HAL, problem+json, keys + Access, caching, Idempotency-Key, rate limits, discovery, a key-value store type | [core](src/core/README.md) |
+| `db` | the app's database through Drizzle: `openDb`, `migrate` per feature, `testDb` | [db](src/db/README.md) |
+| `oauth` | the app as its own OAuth server (auth code + PKCE, agent registration via auth.md, ES256 tokens) | [oauth](src/oauth/README.md) |
+| `pagination` | cursor pages and sorting | [pagination](src/pagination/README.md) |
+| `guide` | the agent guide from templates and its generated parts | [guide](src/guide/README.md) |
+| `mcp` | an MCP server over the routes: tools, resources, prompts, skills, its Server Card | [mcp](src/mcp/README.md) |
+| `a2a` | A2A 1.0 over the MCP tools | [a2a](src/a2a/README.md) |
+| `vectors` | Gemini Embedding 2 look and meaning vectors: ledgers that never pay twice, `nearest`, `standouts` | [vectors](src/vectors/README.md) |
+| `vector-search` | search by words, picture and likeness: three routes and their tools | [vector-search](src/vector-search/README.md) |
+| `web` | the front door: a public `/` or none, the browser app under `/app` | [web](src/web/README.md) |
+| `boards` | the owner's collections of items with notes; `boardRef` / `parseBoardRef`; the reference feature shape | [boards](src/boards/README.md) |
+| `testing` | `lintOpenApi`, `guideRoutes`, `guideGaps`, `toolRoutes`, `toolsRun` | [testing](src/testing/README.md) |
+| `search-client`, `search-react`, `vector-search-ui`, `boards-client`, `boards-react` | the browser side: typed clients, headless hooks, an optional shadcn block | [browser](src/browser/README.md) |
+
+## Add parts to an existing app
+
+```bash
+npx @escalay/kit add core db oauth guide mcp testing --dir apps/api/src/kit --install
+npx @escalay/kit list                                # parts, what they need, what's installed
+npx @escalay/kit doctor --dir apps/api/src/kit       # missing, edited, behind: one line each with its fix; exits 1
+npx @escalay/kit diff --dir apps/api/src/kit --patch # before upgrading
+npx @escalay/kit update --dir apps/api/src/kit       # never overwrites your edits without --force
+```
+
+`--dir` defaults to `src/kit`. The app imports `./kit/index.js` and each entry part's folder (`./kit/mcp/index.js`,
+`./kit/boards/index.js`, `./kit/testing/index.js`). Its container build needs nothing from this repo.
+
+The browser parts go into the frontend. Either a kit of their own, or, in a repo that has both, `--web-dir`
+(relative to `--dir`, remembered in `kit.json`) so one `kit.json` tracks the server and browser files:
+
+```bash
+npx @escalay/kit add search-react --dir apps/web/src/search
+npx @escalay/kit add boards boards-react --dir src/kit --web-dir ../web
+```
+
+### One part with the shadcn CLI
+
+The repo is a shadcn registry ([`registry.json`](registry.json), no build step). Each part is a universal item whose
+files land in `src/kit/<part>/`, so no `components.json` is needed; parts it requires and npm packages come with it.
+
+```bash
+npx shadcn add escalay/api-kit/pagination          # core comes with it
+npx shadcn add escalay/api-kit/vector-search-ui    # the search block; needs shadcn's button and input
+npx @escalay/kit adopt                             # then write kit.json from what is on disk
+```
+
+The shadcn CLI writes no record, so run `adopt` once (or `doctor --adopt`): it records every part found in `--dir`
+and writes the generated `index.ts`. A file you already changed shows as edited.
+
+### What `kit.json` records
+
+`src/kit/kit.json` is the lock file; there is no second one. It holds the kit it came from (`source`), the kit
+`version`, the parts (`modules`), `webDir` when browser files live elsewhere, and a sha256 per file **as the kit
+wrote it**. Comparing that hash with the file on disk and with the current kit is how `diff`, `update` and `doctor`
+tell "you changed it" from "the kit changed it".
+
+## Using it with agents
+
+```bash
+npx skills add escalay/api-kit
+```
+
+| Skill | Use it to |
+|---|---|
+| [`api-kit-build`](skills/api-kit-build/SKILL.md) | start a new API, move an app onto the kit, take a newer kit |
+| [`api-kit-feature`](skills/api-kit-feature/SKILL.md) | add a feature folder: schema, repo, routes, handlers, tools, tests |
+| [`api-kit-review`](skills/api-kit-review/SKILL.md) | check an API is agent-ready: the commands to run and what a failure means |
+
+Working on the kit itself: [AGENTS.md](AGENTS.md). Licence: [MIT](LICENSE).

package/cli.mjs

@@ -0,0 +1,432 @@
+#!/usr/bin/env node
+/**
+ * kit: copy the kit's parts into an app (shadcn-style), then keep them in step with the kit.
+ * The app owns the copies; `kit.json` beside them records the kit version and the hash of every file as copied, so
+ * `diff` can tell your edits from the kit's changes and `update` never overwrites an edit without `--force`.
+ * `--web-dir` (relative to `--dir`, remembered in kit.json) puts the browser parts in their own folder, still
+ * tracked by the one kit.json (as `@web/<file>`).
+ *
+ *   kit list                                  parts, what they need, which are installed
+ *   kit add core guide mcp testing [--dir src/kit] [--web-dir ../web] [--install]
+ *   kit diff [--dir src/kit] [--patch]        per file: unchanged, you edited, kit changed, both
+ *   kit update [part…] [--dir src/kit] [--force]
+ *   kit doctor [--dir src/kit] [--adopt]      missing files, edited files, parts behind this kit; exits 1 with a fix per line
+ *   kit adopt [--dir src/kit]                 write kit.json for parts copied without it (by the shadcn CLI)
+ *   kit init <dir> [--preset api] [--title "My API"] [--runtime both|cloudflare|node] [--bare] [--yes]
+ *                                             a new app: features/, the kit in src/kit, tests; Node (server.ts, a
+ *                                             container) and/or Workers (worker.ts, D1). It never asks; --yes is accepted
+ *   kit feature <plural-name> [--app .]       a new feature folder (schema, repo, routes, handlers, tools), listed
+ *   kit guide [--from guide] [--out src/guide.gen.ts]  the guide folder as a module (GUIDE_FILES), for Workers
+ *
+ * @example
+ * npx @escalay/kit add core pagination guide mcp testing --dir apps/api/src/kit --install
+ * import { createAgentApi } from './kit/index.js'      // in the app
+ */
+import { spawnSync } from 'node:child_process'
+import { createHash } from 'node:crypto'
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs'
+import { basename, dirname, join, relative, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const KIT = dirname(fileURLToPath(import.meta.url))
+const REPO = 'escalay/api-kit'
+const rangeOf = (dependency) => [dependency.slice(0, dependency.lastIndexOf('@')), dependency.slice(dependency.lastIndexOf('@') + 1)]
+/** registry.json is a shadcn registry; a part's requires are its dependencies on this repo, a dependency without a range is a peer. */
+const REGISTRY = Object.fromEntries(
+  JSON.parse(readFileSync(join(KIT, 'registry.json'), 'utf8')).items.map((item) => [
+    item.name,
+    {
+      description: item.description,
+      files: item.files.map((file) => file.path.replace(/^src\//, '')),
+      requires: (item.registryDependencies ?? []).filter((name) => name.startsWith(`${REPO}/`)).map((name) => name.slice(REPO.length + 1)),
+      dependencies: Object.fromEntries((item.dependencies ?? []).filter((dependency) => dependency.lastIndexOf('@') > 0).map(rangeOf)),
+      entry: item.meta?.entry,
+      web: item.meta?.web,
+    },
+  ]),
+)
+const VERSION = JSON.parse(readFileSync(join(KIT, 'package.json'), 'utf8')).version
+const SOURCE = '@escalay/kit'
+
+const sha = (text) => createHash('sha256').update(text).digest('hex')
+const fail = (message) => {
+  console.error(`kit: ${message}`)
+  process.exit(1)
+}
+
+// ---- Arguments ----
+
+const [command = 'help', ...rest] = process.argv.slice(2)
+const flags = new Set(rest.filter((arg) => arg.startsWith('--') && !arg.includes('=')))
+const valueOf = (flag) => rest.find((arg, index) => rest[index - 1] === flag) ?? rest.find((arg) => arg.startsWith(`${flag}=`))?.slice(flag.length + 1)
+const dirArg = valueOf('--dir') ?? 'src/kit'
+const webDirArg = valueOf('--web-dir')
+/** Flags that take the next argument as their value, so it is never read as a name. */
+const VALUE_FLAGS = new Set(['--dir', '--web-dir', '--title', '--runtime', '--preset', '--app', '--from', '--out'])
+const names = rest.filter((arg, index) => !arg.startsWith('--') && !VALUE_FLAGS.has(rest[index - 1]))
+const dir = resolve(process.cwd(), dirArg)
+const lockPath = join(dir, 'kit.json')
+
+// ---- Modules ----
+
+/** The modules asked for plus everything they require, in registry order. */
+const withRequired = (wanted) => {
+  const all = new Set()
+  const visit = (name) => {
+    if (!REGISTRY[name]) fail(`no module "${name}". Modules: ${Object.keys(REGISTRY).join(', ')}`)
+    if (all.has(name)) return
+    for (const required of REGISTRY[name].requires ?? []) visit(required)
+    all.add(name)
+  }
+  wanted.forEach(visit)
+  return Object.keys(REGISTRY).filter((name) => all.has(name))
+}
+
+const upstreamOf = (file) => readFileSync(join(KIT, 'src', file), 'utf8')
+
+// A browser module's files sit under the web dir when there is one; kit.json keys them `@web/<file>` (a module folder
+// can be called web/, so the prefix must be something no folder is)
+const WEB = '@web/'
+const WEB_FILES = new Set(Object.values(REGISTRY).filter((module) => module.web).flatMap((module) => module.files))
+// Every module carries its README (what it is for, an example, its rules), so the practices travel with the copy
+const keyOf = (name, file, webDir) => (REGISTRY[name].web && webDir ? WEB + file : file)
+const sourceOf = (key) => (key.startsWith(WEB) ? key.slice(WEB.length) : key)
+const pathOf = (key, webDir) => (key.startsWith(WEB) && webDir ? join(resolve(dir, webDir), key.slice(WEB.length)) : join(dir, key))
+
+/** index.ts re-exports every installed module that isn't its own entry point (mcp, testing, the browser modules). */
+const indexFor = (modules) =>
+  modules
+    .filter((name) => !REGISTRY[name].entry)
+    .flatMap((name) => {
+      const own = REGISTRY[name].files.find((file) => file.endsWith('/index.ts'))
+      return own ? [own] : REGISTRY[name].files.filter((file) => /\.tsx?$/.test(file))
+    })
+    .sort()
+    .map((file) => `export * from './${file.replace(/\.ts$/, '.js')}'`)
+    .join('\n') + '\n'
+
+/** What each file should contain at this kit version: the module files, plus the generated index when anything goes in it. */
+const expectedFiles = (modules, webDir) => {
+  const files = Object.fromEntries(modules.flatMap((name) => REGISTRY[name].files.map((file) => [keyOf(name, file, webDir), upstreamOf(file)])))
+  if (modules.some((name) => !REGISTRY[name].entry)) files['index.ts'] = indexFor(modules)
+  return files
+}
+
+/** kit.json, with web-dir keys from kit 0.10–1.0.1 (`web/<file>`) read as `@web/<file>`. */
+const readLock = () => {
+  if (!existsSync(lockPath)) return null
+  const lock = JSON.parse(readFileSync(lockPath, 'utf8'))
+  if (!lock.webDir) return lock
+  const flat = { 'web/search-client.ts': 'browser/search-client.ts', 'web/search-react.ts': 'browser/search-react.ts', 'web/boards-client.ts': 'browser/boards-client.ts', 'web/boards-react.ts': 'browser/boards-react.ts', 'web/refs.ts': 'boards/refs.ts', 'web/vector-search-block.tsx': 'browser/vector-search-block.tsx' }
+  const keyFor = (key) => (flat[key] ? `${WEB}${flat[key]}` : key.startsWith('web/') && WEB_FILES.has(key.slice(4)) ? WEB + key.slice(4) : key)
+  return { ...lock, files: Object.fromEntries(Object.entries(lock.files).map(([key, hash]) => [keyFor(key), flat[key] ? null : hash]).filter(([, hash]) => hash !== null)) }
+}
+const writeLock = (modules, hashes, webDir) =>
+  writeFileSync(lockPath, JSON.stringify({ $comment: 'Written by @escalay/kit; hashes are of the files as the kit last wrote them.', source: SOURCE, version: VERSION, modules, ...(webDir ? { webDir } : {}), files: Object.fromEntries(Object.entries(hashes).sort()) }, null, 2) + '\n')
+
+const dependenciesOf = (modules) => Object.assign({}, ...modules.map((name) => REGISTRY[name].dependencies ?? {}))
+const installCommand = (modules) => {
+  const deps = Object.entries(dependenciesOf(modules)).map(([name, range]) => `${name}@${range}`)
+  return deps.length ? `pnpm add ${deps.join(' ')}` : 'none'
+}
+
+const install = (modules) => {
+  if (installCommand(modules) === 'none') return
+  const result = spawnSync('pnpm', installCommand(modules).split(' ').slice(1), { stdio: 'inherit', cwd: process.cwd() })
+  if (result.status !== 0) fail('pnpm add failed; run it yourself: ' + installCommand(modules))
+}
+
+/** Each file's state against kit.json: did you edit it, did the kit change it. */
+const statusOf = (lock, expected) =>
+  Object.keys({ ...lock.files, ...expected }).sort().map((file) => {
+    const path = pathOf(file, lock.webDir)
+    const local = existsSync(path) ? sha(readFileSync(path, 'utf8')) : null
+    const recorded = lock.files[file] ?? null
+    const kit = expected[file] === undefined ? null : sha(expected[file])
+    const edited = local !== null && recorded !== null && local !== recorded
+    const changed = kit !== recorded
+    const state = local === null ? 'missing' : recorded === null ? 'new in kit' : kit === null ? 'dropped by kit' : edited && changed ? 'both changed' : edited ? 'you edited' : changed ? 'kit changed' : 'unchanged'
+    return { file, state, edited, changed }
+  })
+
+/** The part a recorded file came with (`index.ts` is the kit's own). */
+const partOf = (key, modules) => modules.find((name) => REGISTRY[name].files.includes(sourceOf(key))) ?? 'kit'
+
+/** One line per thing wrong with the copy, each saying how to fix it. */
+const findingsOf = (lock) => {
+  const statuses = statusOf(lock, expectedFiles(lock.modules, lock.webDir))
+  const behind = [...new Set(statuses.filter(({ state }) => ['kit changed', 'both changed', 'new in kit', 'dropped by kit'].includes(state)).map(({ file }) => partOf(file, lock.modules)))]
+  return [
+    ...statuses.filter(({ state }) => state === 'missing').map(({ file }) => `missing  ${file}: \`kit update --dir ${dirArg}\` writes it again`),
+    ...statuses.filter(({ edited }) => edited).map(({ file }) => `edited   ${file}: yours to keep; \`kit diff --dir ${dirArg} --patch\` shows the change, \`kit update --dir ${dirArg} --force\` takes the kit's`),
+    ...behind.map((part) => `behind   ${part} was copied from kit ${lock.version} and kit ${VERSION} changed it: \`kit diff --dir ${dirArg} --patch\`, then \`kit update --dir ${dirArg}\``),
+    ...(lock.version !== VERSION && !behind.length ? [`behind   kit.json says kit ${lock.version}, this is ${VERSION} with the same files: \`kit update --dir ${dirArg}\` records it`] : []),
+  ]
+}
+
+/** Writes kit.json for parts that were copied without one (the shadcn CLI): every part whose files are all on disk. */
+const adopt = () => {
+  if (existsSync(lockPath)) fail(`${dirArg} already has a kit.json; \`kit doctor --dir ${dirArg}\` checks it`)
+  const found = Object.keys(REGISTRY).filter((name) => REGISTRY[name].files.every((file) => existsSync(join(dir, file))))
+  if (!found.length) fail(`no parts in ${dirArg}; \`kit add <part> --dir ${dirArg}\` copies one, \`kit list\` names them`)
+  const modules = withRequired(found)
+  const expected = expectedFiles(modules)
+  const index = join(dir, 'index.ts')
+  if (expected['index.ts'] && !existsSync(index)) writeFileSync(index, expected['index.ts'])
+  // The kit's hashes, not the disk's: a file that already differs shows as edited instead of passing as the kit's
+  writeLock(modules, Object.fromEntries(Object.entries(expected).map(([file, text]) => [file, sha(text)])))
+  console.log(`Adopted ${found.join(', ')} in ${dirArg} as kit ${VERSION}`)
+  const absent = modules.filter((name) => !found.includes(name))
+  if (absent.length) console.log(`Recorded ${absent.join(', ')} too (they are required): \`kit update --dir ${dirArg}\` copies them`)
+}
+
+// ---- Generators: a new app, a new feature ----
+
+/** The modules a new app starts with. */
+const APP_MODULES = ['core', 'db', 'oauth', 'guide', 'mcp', 'testing']
+const RUNTIME = { '@hono/node-server': '^2.1.5', tsx: '^4.23.15' }
+const DEV = { '@types/node': '^24.19.2', typescript: '^7.0.2', vitest: '^5.0.5' }
+/** What the Cloudflare side adds, at the versions the kit tests with. */
+const KIT_DEV = JSON.parse(readFileSync(join(KIT, 'package.json'), 'utf8')).devDependencies
+const WORKERS_DEV = Object.fromEntries(['wrangler', '@cloudflare/vitest-plugin', '@cloudflare/workers-types'].map((name) => [name, KIT_DEV[name]]))
+/** The runtimes an app can run on: `node` (server.ts, a container), `cloudflare` (worker.ts, D1), or `both`. */
+const RUNTIMES = ['both', 'cloudflare', 'node']
+/** The starting combinations: `api` is the kit's parts for an API with one example feature. */
+const PRESETS = ['api', 'selfhosted']
+const scriptsFor = (runtime) => {
+  const node = { dev: 'tsx watch src/server.ts', start: 'tsx src/server.ts' }
+  const workers = {
+    migrations: 'tsx scripts/migrations.ts',
+    deploy: 'pnpm guide && pnpm migrations && wrangler d1 migrations apply DB --remote && wrangler deploy',
+  }
+  const typecheck = runtime === 'node' ? 'tsc --noEmit' : 'tsc --noEmit && tsc --noEmit -p test/workers/tsconfig.json'
+  return {
+    ...(runtime === 'cloudflare' ? { dev: 'wrangler dev' } : node),
+    ...(runtime === 'both' ? { 'dev:worker': 'wrangler dev' } : {}),
+    guide: 'tsx scripts/guide.ts',
+    ...(runtime === 'node' ? {} : workers),
+    test: 'vitest run',
+    typecheck,
+  }
+}
+
+/** Writes a guide folder as a module (GUIDE_FILES). Must match guideModuleSource in src/guide/guide.ts byte for byte (test/kit.test.ts checks). */
+const writeGuideModule = (from, out) => {
+  const files = []
+  const walk = (folder) => {
+    for (const entry of readdirSync(folder, { withFileTypes: true })) {
+      const path = join(folder, entry.name)
+      if (entry.isDirectory()) walk(path)
+      else if (/\.(md|txt)$/.test(entry.name)) files.push([relative(from, path).split('\\').join('/'), readFileSync(path, 'utf8')])
+    }
+  }
+  walk(from)
+  files.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+  mkdirSync(dirname(out), { recursive: true })
+  writeFileSync(
+    out,
+    '// Generated by `kit guide` from the guide folder: edit the templates there, then run it again.\n' +
+      'export const GUIDE_FILES: Record<string, string> = {\n' +
+      files.map(([path, body]) => `  ${JSON.stringify(path)}: ${JSON.stringify(body)},\n`).join('') +
+      '}\n',
+  )
+  return files.length
+}
+
+/** Copies a template folder, filling every placeholder in names and contents. */
+const copyTemplate = (from, to, vars, renameOf = (file) => file) => {
+  const fill = (text) => Object.entries(vars).reduce((filled, [key, value]) => filled.replaceAll(key, value), text)
+  mkdirSync(to, { recursive: true })
+  for (const entry of readdirSync(from)) {
+    const source = join(from, entry)
+    const target = join(to, fill(renameOf(entry)))
+    if (statSync(source).isDirectory()) copyTemplate(source, target, vars)
+    else writeFileSync(target, fill(readFileSync(source, 'utf8')), { mode: statSync(source).mode })
+  }
+}
+
+const capital = (word) => word[0].toUpperCase() + word.slice(1)
+const singularOf = (word) => (word.endsWith('ies') ? `${word.slice(0, -3)}y` : /(ss|x|ch|sh)es$/.test(word) ? word.slice(0, -2) : word.endsWith('s') && !word.endsWith('ss') ? word.slice(0, -1) : word)
+
+/** Every spelling a feature's files need, from its plural kebab-case name (`reading-lists`). */
+export const namesOf = (name) => {
+  if (!/^[a-z][a-z0-9]*(-[a-z0-9]+)*$/.test(name)) fail(`"${name}" isn't a plural kebab-case name like notes or reading-lists`)
+  const many = name.split('-')
+  const one = [...many.slice(0, -1), singularOf(many.at(-1))]
+  return {
+    __name__: name,
+    __camel__: many[0] + many.slice(1).map(capital).join(''),
+    __Pascal__: many.map(capital).join(''),
+    __Singular__: one.map(capital).join(''),
+    __CONST__: many.join('_').toUpperCase(),
+    __table__: many.join('_'),
+    __snake_singular__: one.join('_'),
+    __snake__: many.join('_'),
+    __labels__: many.join(' '),
+    __label__: one.join(' '),
+  }
+}
+
+const addFeature = (root, name) => {
+  const vars = namesOf(name)
+  const list = join(root, 'src/features/index.ts')
+  if (!existsSync(list)) fail(`no src/features/index.ts in ${relative(process.cwd(), root) || '.'}: run it inside an app made by init, or pass --app <dir>`)
+  const folder = join(root, 'src/features', name)
+  if (existsSync(folder)) fail(`src/features/${name} already exists`)
+  const text = readFileSync(list, 'utf8')
+  if (!text.includes('// kit:imports') || !text.includes('  // kit:features')) fail('src/features/index.ts lost its `// kit:imports` or `// kit:features` line; add the feature there by hand')
+  copyTemplate(join(KIT, 'templates/feature'), folder, vars, (file) => (file === 'feature.test.ts' ? `${name}.test.ts` : file))
+  writeFileSync(list, text.replace('// kit:imports', `import { feature as ${vars.__camel__} } from './${name}/index.js'\n// kit:imports`).replace('  // kit:features', `  ${vars.__camel__},\n  // kit:features`))
+  console.log(`Made src/features/${name}/ (schema, repo, routes, handlers, tools, index, test) and listed it in src/features/index.ts`)
+}
+
+// ---- Commands ----
+
+const commands = {
+  help: () => console.log(readFileSync(fileURLToPath(import.meta.url), 'utf8').match(/\/\*\*([\s\S]*?)\*\//)[1].replace(/^ \* ?/gm, '').trim()),
+
+  list: () => {
+    const installed = new Set(readLock()?.modules ?? [])
+    for (const [name, module] of Object.entries(REGISTRY)) {
+      const needs = [...(module.requires ?? []), ...Object.keys(module.dependencies ?? {})]
+      console.log(`${installed.has(name) ? '●' : '○'} ${name.padEnd(11)} ${module.description}${needs.length ? `\n  ${''.padEnd(11)} needs: ${needs.join(', ')}` : ''}`)
+    }
+  },
+
+  add: () => {
+    if (!names.length) fail('name the modules to add, e.g. `add core guide mcp`')
+    const lock = readLock()
+    const webDir = webDirArg ?? lock?.webDir
+    const modules = withRequired([...(lock?.modules ?? []), ...names])
+    const expected = expectedFiles(modules, webDir)
+    const hashes = { ...(lock?.files ?? {}) }
+    const skipped = []
+    for (const [file, text] of Object.entries(expected)) {
+      const path = pathOf(file, webDir)
+      mkdirSync(dirname(path), { recursive: true })
+      const local = existsSync(path) ? readFileSync(path, 'utf8') : null
+      const yours = local !== null && local !== text && sha(local) !== hashes[file]
+      if (yours && !flags.has('--force')) {
+        skipped.push(file)
+        continue
+      }
+      writeFileSync(path, text)
+      hashes[file] = sha(text)
+    }
+    writeLock(modules, hashes, webDir)
+    console.log(`Copied ${modules.join(', ')} (kit ${VERSION}) into ${relative(process.cwd(), dir) || '.'}`)
+    if (skipped.length) console.log(`Kept your version of ${skipped.join(', ')} (it differs from the kit); --force overwrites`)
+    if (flags.has('--install')) install(modules)
+    else console.log(`Dependencies: ${installCommand(modules)}`)
+    const entries = modules.filter((name) => REGISTRY[name].entry).map((name) => keyOf(name, REGISTRY[name].files.find((file) => file.endsWith('/index.ts')) ?? REGISTRY[name].files[0], webDir))
+    const importOf = (key) => `'./${relative(process.cwd(), pathOf(key, webDir)).replace(/\.tsx?$/, '.js')}'`
+    console.log(`Import from ${[...(expected['index.ts'] ? ['index.ts'] : []), ...entries].map(importOf).join(', ')}`)
+  },
+
+  guide: () => {
+    const from = resolve(process.cwd(), valueOf('--from') ?? 'guide')
+    const out = resolve(process.cwd(), valueOf('--out') ?? 'src/guide.gen.ts')
+    if (!existsSync(from)) fail(`no guide folder at ${relative(process.cwd(), from)}; pass --from <dir>`)
+    console.log(`Wrote ${writeGuideModule(from, out)} guide files to ${relative(process.cwd(), out)}`)
+  },
+
+  diff: () => {
+    const lock = readLock() ?? fail(`no kit.json in ${dirArg}; add modules first`)
+    const statuses = statusOf(lock, expectedFiles(lock.modules, lock.webDir))
+    console.log(`Kit ${lock.version} in ${dirArg} → kit ${VERSION}`)
+    for (const { file, state } of statuses) console.log(`  ${state.padEnd(15)} ${file}`)
+    if (flags.has('--patch'))
+      for (const { file, changed } of statuses.filter((status) => status.state !== 'unchanged' && status.state !== 'missing')) {
+        if (!changed && file === 'index.ts') continue
+        const upstream = file === 'index.ts' ? null : join(KIT, 'src', sourceOf(file))
+        if (upstream) spawnSync('git', ['--no-pager', 'diff', '--no-index', '--no-color', upstream, pathOf(file, lock.webDir)], { stdio: 'inherit' })
+      }
+    const changed = statuses.filter((status) => status.state !== 'unchanged')
+    process.exitCode = changed.length ? 1 : 0
+  },
+
+  init: () => {
+    const [target] = names
+    if (!target) fail('name the folder: init <dir>')
+    const preset = valueOf('--preset') ?? 'api'
+    if (preset === 'selfhosted') fail('the selfhosted preset arrives with escalay/selfhost-kit; use --preset api')
+    if (!PRESETS.includes(preset)) fail(`--preset is one of ${PRESETS.join(', ')}`)
+    const root = resolve(process.cwd(), target)
+    if (existsSync(root) && readdirSync(root).length) fail(`${target} is not empty`)
+    const name = basename(root)
+    const title = valueOf('--title') ?? name.split(/[-_]/).map(capital).join(' ')
+    const runtime = valueOf('--runtime') ?? 'both'
+    if (!RUNTIMES.includes(runtime)) fail(`--runtime is one of ${RUNTIMES.join(', ')}`)
+    const vars = { __name__: name, __title__: title, __kit__: VERSION, __date__: new Date().toISOString().slice(0, 10) }
+    copyTemplate(join(KIT, 'templates/app'), root, vars, (file) => (file === 'gitignore' ? '.gitignore' : file))
+    if (runtime !== 'node') {
+      copyTemplate(join(KIT, 'templates/runtime-cloudflare'), root, vars, (file) => (file === 'dev.vars.example' ? '.dev.vars.example' : file))
+      mkdirSync(join(root, 'migrations'), { recursive: true })
+    }
+    if (runtime === 'cloudflare') for (const path of ['src/server.ts', 'Dockerfile', 'container']) rmSync(join(root, path), { recursive: true, force: true })
+    // AGENTS.md lines marked for one runtime stay only in apps that run on it
+    const keeps = { node: runtime !== 'cloudflare', workers: runtime !== 'node' }
+    const agents = join(root, 'AGENTS.md')
+    writeFileSync(agents, readFileSync(agents, 'utf8').split('\n').flatMap((line) => {
+      const marked = line.match(/^(.*) <!-- runtime:(node|workers) -->$/)
+      return !marked ? [line] : keeps[marked[2]] ? [marked[1]] : []
+    }).join('\n').replaceAll('__worker_dev__', runtime === 'both' ? 'dev:worker' : 'dev'))
+    writeGuideModule(join(root, 'guide'), join(root, 'src/guide.gen.ts'))
+    const added = spawnSync(process.execPath, [fileURLToPath(import.meta.url), 'add', ...APP_MODULES, '--dir', 'src/kit'], { cwd: root, encoding: 'utf8' })
+    if (added.status !== 0) fail(`copying the kit failed: ${added.stderr}`)
+    const modules = withRequired(APP_MODULES)
+    const runtimeDeps = runtime === 'cloudflare' ? {} : RUNTIME
+    const devDeps = { ...DEV, ...(runtime === 'node' ? {} : WORKERS_DEV), ...(runtime === 'cloudflare' ? { tsx: RUNTIME.tsx } : {}) }
+    const sorted = (deps) => Object.fromEntries(Object.entries(deps).sort())
+    writeFileSync(join(root, 'package.json'), JSON.stringify({ name, version: '0.1.0', private: true, type: 'module', engines: { node: '>=22.16.0' }, scripts: scriptsFor(runtime), dependencies: sorted({ ...dependenciesOf(modules), ...runtimeDeps }), devDependencies: sorted(devDeps) }, null, 2) + '\n')
+    if (!flags.has('--bare')) addFeature(root, 'notes')
+    console.log(`Made ${title} in ${relative(process.cwd(), root)} for ${runtime === 'both' ? 'Node and Cloudflare Workers' : runtime === 'node' ? 'Node' : 'Cloudflare Workers'} with kit ${VERSION} (${modules.join(', ')})`)
+    console.log(`Next: cd ${relative(process.cwd(), root)} && pnpm install${runtime === 'node' ? '' : ' && pnpm migrations'} && pnpm test && pnpm dev`)
+  },
+
+  adopt,
+
+  doctor: () => {
+    if (flags.has('--adopt') && !existsSync(lockPath)) adopt()
+    const lock = readLock()
+    const findings = lock ? findingsOf(lock) : [`no record  ${dirArg} has no kit.json: \`kit adopt --dir ${dirArg}\` writes it from the parts on disk, \`kit add <part> --dir ${dirArg}\` copies new ones`]
+    for (const finding of findings) console.log(finding)
+    console.log(findings.length ? `${findings.length} to fix in ${dirArg}` : `${dirArg} matches kit ${VERSION}: ${lock.modules.join(', ')}`)
+    process.exitCode = findings.length ? 1 : 0
+  },
+
+  feature: () => {
+    const [name] = names
+    if (!name) fail('name the feature, plural and kebab-case: feature reading-lists')
+    addFeature(resolve(process.cwd(), valueOf('--app') ?? '.'), name)
+  },
+
+  update: () => {
+    const lock = readLock() ?? fail(`no kit.json in ${dirArg}; add modules first`)
+    const modules = withRequired([...lock.modules, ...names])
+    const expected = expectedFiles(modules, lock.webDir)
+    const hashes = { ...lock.files }
+    const kept = []
+    for (const { file, state } of statusOf(lock, expected)) {
+      if (state === 'dropped by kit') {
+        delete hashes[file]
+        console.log(`  dropped       ${file} (no longer in the kit; delete it when nothing imports it)`)
+        continue
+      }
+      if (state === 'unchanged') continue
+      if ((state === 'both changed' || state === 'you edited') && !flags.has('--force')) {
+        if (state === 'both changed') kept.push(file)
+        continue
+      }
+      mkdirSync(dirname(pathOf(file, lock.webDir)), { recursive: true })
+      writeFileSync(pathOf(file, lock.webDir), expected[file])
+      hashes[file] = sha(expected[file])
+      console.log(`  updated       ${file}`)
+    }
+    writeLock(modules, hashes, lock.webDir)
+    if (kept.length) console.log(`Kept your edits to ${kept.join(', ')} although the kit changed them: \`diff --patch\` shows both, merge by hand, or --force`)
+    console.log(`kit.json → ${VERSION}. Dependencies: ${installCommand(modules)}`)
+  },
+}
+
+;(commands[command] ?? (() => fail(`unknown command "${command}". Commands: ${Object.keys(commands).join(', ')}`)))()