@helloleo/plugins 0.1.20-beta.1 → 0.2.0-beta.0

package/dist/templates/tanstack-start-2026-06-18/drizzle.config.ts

@@ -2,14 +2,9 @@ import { defineConfig } from 'drizzle-kit'
 
 // src/db/schema.ts is the single source of truth for the D1 / libsql schema.
 //
-// DEV: `drizzle-kit push --force` (the `dev` script) syncs the schema straight
-// into the cf-shim's libsql file. The url MUST match the shim's DEV_DB_PATH
-// default (.dev.db) so push and the running app open the same file.
-//
-// PROD: migrations are generated with `drizzle-kit generate` and applied to D1
-// with `wrangler d1 migrations apply DB --remote` (reads migrations_dir in
-// wrangler.jsonc) — so no d1-http driver or Cloudflare API env vars are needed
-// here.
+// In development, your database is always up-to-date. In production, we migrate
+// automatically when you publish.
+
 const devDbPath = process.env.DEV_DB_PATH ?? '.dev.db'
 
 export default defineConfig({

package/dist/templates/tanstack-start-2026-06-18/package.json

@@ -9,10 +9,9 @@
     "dev": "drizzle-kit push --force && vite dev",
     "build": "oxlint --fix && vite build",
     "preview": "vite preview",
-    "deploy": "bun run db:generate && vite build && wrangler deploy && wrangler d1 migrations apply DB --remote",
     "db:generate": "drizzle-kit generate",
+    "generate-routes": "tsr generate",
     "db:push": "drizzle-kit push --force",
-    "db:migrate": "wrangler d1 migrations apply DB --remote",
     "typecheck": "tsc --noEmit",
     "lint": "oxlint --fix",
     "test": "vitest run"
@@ -75,10 +74,11 @@
   "devDependencies": {
     "@cloudflare/vite-plugin": "^1.13.0",
     "@cloudflare/workers-types": "^4.20250906.0",
-    "@helloleo/vite-config": "^0.1.2",
+    "@helloleo/vite-config": "^0.1.4",
     "@libsql/client": "^0.14.0",
     "@tailwindcss/typography": "^0.5.16",
     "drizzle-kit": "^0.31.10",
+    "@tanstack/router-cli": "^1.167.0",
     "@tanstack/router-plugin": "latest",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.3.0",

package/dist/templates/tanstack-start-2026-06-18/src/api/health.ts

@@ -0,0 +1,66 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { supabaseAdmin } from "@/integrations/supabase/client.server";
+
+export const Route = createFileRoute("/api/health")({
+  server: {
+    handlers: {
+      GET: async () => {
+        const startedAt = Date.now();
+
+        // Server health
+        const server = {
+          status: "ok" as const,
+          uptimeSeconds: Math.round(
+            typeof process !== "undefined" &&
+              typeof process.uptime === "function"
+              ? process.uptime()
+              : 0,
+          ),
+          timestamp: new Date().toISOString(),
+          runtime: "cloudflare-workers",
+        };
+
+        // Database health — lightweight query against a known table
+        let database: {
+          status: "ok" | "error";
+          latencyMs: number;
+          error: string | null;
+        };
+        const dbStart = Date.now();
+        try {
+          const { error } = await supabaseAdmin
+            .from("notes")
+            .select("id", { count: "exact", head: true })
+            .limit(1);
+          if (error) throw error;
+          database = {
+            status: "ok",
+            latencyMs: Date.now() - dbStart,
+            error: null,
+          };
+        } catch (err) {
+          database = {
+            status: "error",
+            latencyMs: Date.now() - dbStart,
+            error: err instanceof Error ? err.message : String(err),
+          };
+        }
+
+        const overall =
+          server.status === "ok" && database.status === "ok"
+            ? "ok"
+            : "degraded";
+
+        return Response.json(
+          {
+            status: overall,
+            server,
+            database,
+            checkedInMs: Date.now() - startedAt,
+          },
+          { status: overall === "ok" ? 200 : 503 },
+        );
+      },
+    },
+  },
+});

package/dist/templates/tanstack-start-2026-06-18/src/routes/__root.tsx

@@ -18,6 +18,7 @@ export const Route = createRootRouteWithContext<{ queryClient: QueryClient }>()(
       { charSet: 'utf-8' },
       { name: 'viewport', content: 'width=device-width, initial-scale=1.0' },
       { title: '{{LEO_NAME}}' },
+      { name: 'description', content: '{{LEO_DESCRIPTION}}' },
     ],
     links: [
       { rel: 'stylesheet', href: appCss },

package/dist/templates/tanstack-start-2026-06-18/src/server.ts

@@ -1,5 +1,6 @@
-// Cloudflare Worker entry (wrangler.jsonc `main`). Wraps the TanStack Start
-// server entry so an SSR failure renders a clean 500 instead of a raw stack.
+// Cloudflare Worker entry (the Worker `main`, configured by @helloleo/vite-config).
+// Wraps the TanStack Start server entry so an SSR failure renders a clean 500
+// instead of a raw stack.
 type ServerEntry = {
   fetch: (request: Request, env: unknown, ctx: unknown) => Promise<Response> | Response
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helloleo/plugins",
-  "version": "0.1.20-beta.1",
+  "version": "0.2.0-beta.0",
   "description": "OpenCode plugins for HelloLeo",
   "license": "UNLICENSED",
   "type": "module",

package/src/template-render.ts

@@ -33,16 +33,21 @@ export async function renderTemplate(
 	const root = path.join(TEMPLATES_ROOT, templateId);
 	const glob = new Glob("**/*");
 	const created: string[] = [];
+
 	for await (const rel of glob.scan({
 		cwd: root,
 		dot: true,
 		onlyFiles: true,
 	})) {
 		if (SKIP.test(rel)) continue;
+
 		const raw = await Bun.file(path.join(root, rel)).text();
 		const content = raw.replace(TOKEN_RE, (_m, key: string) => vars[key] ?? "");
+
 		await Bun.write(path.join(destDir, rel), content);
+
 		created.push(rel);
 	}
+
 	return created.sort();
 }

package/src/templates/tanstack-start-2026-06-18/drizzle.config.ts

@@ -2,14 +2,9 @@ import { defineConfig } from 'drizzle-kit'
 
 // src/db/schema.ts is the single source of truth for the D1 / libsql schema.
 //
-// DEV: `drizzle-kit push --force` (the `dev` script) syncs the schema straight
-// into the cf-shim's libsql file. The url MUST match the shim's DEV_DB_PATH
-// default (.dev.db) so push and the running app open the same file.
-//
-// PROD: migrations are generated with `drizzle-kit generate` and applied to D1
-// with `wrangler d1 migrations apply DB --remote` (reads migrations_dir in
-// wrangler.jsonc) — so no d1-http driver or Cloudflare API env vars are needed
-// here.
+// In development, your database is always up-to-date. In production, we migrate
+// automatically when you publish.
+
 const devDbPath = process.env.DEV_DB_PATH ?? '.dev.db'
 
 export default defineConfig({

package/src/templates/tanstack-start-2026-06-18/package.json

@@ -9,10 +9,9 @@
     "dev": "drizzle-kit push --force && vite dev",
     "build": "oxlint --fix && vite build",
     "preview": "vite preview",
-    "deploy": "bun run db:generate && vite build && wrangler deploy && wrangler d1 migrations apply DB --remote",
     "db:generate": "drizzle-kit generate",
+    "generate-routes": "tsr generate",
     "db:push": "drizzle-kit push --force",
-    "db:migrate": "wrangler d1 migrations apply DB --remote",
     "typecheck": "tsc --noEmit",
     "lint": "oxlint --fix",
     "test": "vitest run"
@@ -75,10 +74,11 @@
   "devDependencies": {
     "@cloudflare/vite-plugin": "^1.13.0",
     "@cloudflare/workers-types": "^4.20250906.0",
-    "@helloleo/vite-config": "^0.1.2",
+    "@helloleo/vite-config": "^0.1.4",
     "@libsql/client": "^0.14.0",
     "@tailwindcss/typography": "^0.5.16",
     "drizzle-kit": "^0.31.10",
+    "@tanstack/router-cli": "^1.167.0",
     "@tanstack/router-plugin": "latest",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.3.0",

package/src/templates/tanstack-start-2026-06-18/src/api/health.ts

@@ -0,0 +1,66 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { supabaseAdmin } from "@/integrations/supabase/client.server";
+
+export const Route = createFileRoute("/api/health")({
+  server: {
+    handlers: {
+      GET: async () => {
+        const startedAt = Date.now();
+
+        // Server health
+        const server = {
+          status: "ok" as const,
+          uptimeSeconds: Math.round(
+            typeof process !== "undefined" &&
+              typeof process.uptime === "function"
+              ? process.uptime()
+              : 0,
+          ),
+          timestamp: new Date().toISOString(),
+          runtime: "cloudflare-workers",
+        };
+
+        // Database health — lightweight query against a known table
+        let database: {
+          status: "ok" | "error";
+          latencyMs: number;
+          error: string | null;
+        };
+        const dbStart = Date.now();
+        try {
+          const { error } = await supabaseAdmin
+            .from("notes")
+            .select("id", { count: "exact", head: true })
+            .limit(1);
+          if (error) throw error;
+          database = {
+            status: "ok",
+            latencyMs: Date.now() - dbStart,
+            error: null,
+          };
+        } catch (err) {
+          database = {
+            status: "error",
+            latencyMs: Date.now() - dbStart,
+            error: err instanceof Error ? err.message : String(err),
+          };
+        }
+
+        const overall =
+          server.status === "ok" && database.status === "ok"
+            ? "ok"
+            : "degraded";
+
+        return Response.json(
+          {
+            status: overall,
+            server,
+            database,
+            checkedInMs: Date.now() - startedAt,
+          },
+          { status: overall === "ok" ? 200 : 503 },
+        );
+      },
+    },
+  },
+});

package/src/templates/tanstack-start-2026-06-18/src/routes/__root.tsx

@@ -18,6 +18,7 @@ export const Route = createRootRouteWithContext<{ queryClient: QueryClient }>()(
       { charSet: 'utf-8' },
       { name: 'viewport', content: 'width=device-width, initial-scale=1.0' },
       { title: '{{LEO_NAME}}' },
+      { name: 'description', content: '{{LEO_DESCRIPTION}}' },
     ],
     links: [
       { rel: 'stylesheet', href: appCss },

package/src/templates/tanstack-start-2026-06-18/src/server.ts

@@ -1,5 +1,6 @@
-// Cloudflare Worker entry (wrangler.jsonc `main`). Wraps the TanStack Start
-// server entry so an SSR failure renders a clean 500 instead of a raw stack.
+// Cloudflare Worker entry (the Worker `main`, configured by @helloleo/vite-config).
+// Wraps the TanStack Start server entry so an SSR failure renders a clean 500
+// instead of a raw stack.
 type ServerEntry = {
   fetch: (request: Request, env: unknown, ctx: unknown) => Promise<Response> | Response
 }

package/src/tools/scaffold.ts

@@ -2,6 +2,7 @@ import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import type { Plugin } from "@opencode-ai/plugin";
 import { tool } from "@opencode-ai/plugin";
+import { z } from "zod/v4";
 import { renderTemplate } from "../template-render.ts";
 
 /**
@@ -25,25 +26,31 @@ export function projectUuidFromDir(dir: string): string {
 	return path.basename(dir);
 }
 
-export interface BaseScaffoldOptions {
-	name?: string;
-}
+const scaffoldOptionsSchema = z.object({
+	name: z
+		.string()
+		.describe("Short product name. Used as the page title and package name."),
+	description: z
+		.string()
+		.describe("One sentence describing the app. Used as the meta description."),
+});
 
 /**
  * Write the base scaffold by rendering the TanStack Start template into dir,
  * then adding .leo/project.json (template metadata the tool owns, not part of
- * the template tree). Shared between `scaffold` (frontend-only) and
- * `setup_netsuite` (base + OAuth files). Returns the relative paths written.
+ * the template tree). Returns the relative paths written.
  */
 export async function writeBaseScaffold(
-	opts: BaseScaffoldOptions,
+	{ name, description }: z.infer<typeof scaffoldOptionsSchema>,
 	dir: string,
 ): Promise<string[]> {
-	const name = opts.name ?? "leo-project";
-
 	const created = await renderTemplate(
 		SCAFFOLD_VERSION,
-		{ LEO_NAME: name, LEO_PROJECT_UUID: projectUuidFromDir(dir) },
+		{
+			LEO_NAME: name,
+			LEO_DESCRIPTION: description,
+			LEO_PROJECT_UUID: projectUuidFromDir(dir),
+		},
 		dir,
 	);
 
@@ -59,52 +66,35 @@ export async function writeBaseScaffold(
 
 export const scaffold = tool({
 	description:
-		"Scaffold a new React 19 + Vite + Tailwind CSS v4 + TanStack Start project " +
-		"with shadcn/ui baked in, wired to @helloleo/runtime for Cloudflare " +
-		"bindings (D1 + KV + R2). Renders the full template: TanStack file-based " +
-		"routing + SSR (src/routes/, src/router.tsx), the Cloudflare Worker entry " +
-		"(src/server.ts) + wrangler.jsonc (DB/KV/BUCKET bindings), a Drizzle DB " +
-		"layer (src/db/schema.ts as the single source of truth, src/db/index.ts " +
-		"typed client, drizzle.config.ts), the complete shadcn/ui component set " +
-		"under src/components/ui, src/lib/utils.ts (cn helper), src/lib/proxy.ts " +
-		"(HelloLeo integration proxy), src/styles.css (shadcn design tokens, " +
-		"light+dark), plus package.json, vite.config.ts, tsconfig.json, " +
-		"components.json, .gitignore and the generated src/routeTree.gen.ts. Call " +
-		"this FIRST for any new project before adding routes and pages. For " +
-		"NetSuite projects (NetSuite MCP in the live list), call `setup_netsuite` " +
-		"INSTEAD -- it bundles base scaffold + OAuth wiring in one call. Do not " +
-		"call both.",
+		"Scaffold a new TanStack Start project with React 19, SSR, file-based " +
+		"routing, Tailwind v4, shadcn/ui, react-query, and a database, KV and " +
+		"bucket via @helloleo/runtime. Call this first for any new project, " +
+		"before writing routes or components.",
 	args: {
-		name: tool.schema
-			.string()
-			.optional()
-			.describe("Project name for package.json (default: leo-project)"),
+		name: scaffoldOptionsSchema.shape.name,
+		description: scaffoldOptionsSchema.shape.description,
 	},
 	async execute(args, context) {
 		const created = await writeBaseScaffold(args, context.directory);
+		const uiComponents = created.filter((f) =>
+			f.startsWith("src/components/ui/"),
+		);
+		const rest = created.filter((f) => !f.startsWith("src/components/ui/"));
 		return [
 			`Scaffolded ${created.length} files:`,
-			...created.map((f) => `  - ${f}`),
+			...rest.map((f) => `  - ${f}`),
+			`  - src/components/ui/ (${uiComponents.length} shadcn/ui components)`,
+			"",
+			"Notes:",
+			"- This is a TanStack Start project. The server entry is src/server.ts. There is no index.html or client entrypoint.",
+			"- Add routes as files in src/routes/. Do not default export route components.",
+			"- shadcn/ui components are already in src/components/ui.",
+			"- Design system: edit the tokens in src/styles.css (light and dark blocks).",
+			"- The database schema lives in src/db/schema.ts. Migrations run automatically.",
+			"- Always fetch data with react-query (useQuery and useMutation).",
 			"",
-			"Next: add routes as files under src/routes/ (TanStack file-based",
-			"  routing). Edit src/routes/index.tsx for the home page.",
-			"UI: shadcn/ui components are already in src/components/ui -- import and",
-			"  use them; do not attempt to re-add via the shadcn CLI.",
-			"Design system: edit tokens in src/styles.css (light + dark blocks).",
-			"Database: edit src/db/schema.ts (the single source of truth) -- `bun run",
-			"  db:push` syncs it to the dev DB; the `dev` script does this for you.",
-			"  Query via `import { db } from '#/db'` inside loaders/server functions.",
-			"  KV + R2: `import { kv, storage } from '@helloleo/runtime'`.",
-			"Data fetching: React Query is wired (QueryClient on the router context +",
-			"  QueryClientProvider). ALWAYS fetch with @tanstack/react-query --",
-			"  useQuery / useMutation in components, or a route loader calling",
-			"  context.queryClient.ensureQueryData(). Do NOT hand-roll fetches with",
-			"  useEffect + useState. Wrap the fetch call (usually callIntegration())",
-			"  in the queryFn.",
-			"Integration calls: use callIntegration() from src/lib/proxy.ts -- as the",
-			"  queryFn body, never on its own in useEffect. Its header comment",
-			"  documents slugs, response unwrapping, pagination, and frontend-only vs",
-			"  HelloLeo Cloud routing.",
+			"Next: read src/routes/index.tsx and continue with the user's request.",
+			"For NetSuite projects, call setup_netsuite.",
 		].join("\n");
 	},
 });

package/src/tools/setup-netsuite.ts

@@ -2,21 +2,17 @@ import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import type { Plugin } from "@opencode-ai/plugin";
 import { tool } from "@opencode-ai/plugin";
-import { writeBaseScaffold } from "./scaffold.ts";
 
 /**
- * One-shot bootstrap for a NetSuite project. Writes the base HelloLeo
- * scaffold (via writeBaseScaffold) plus ADDITIVE NetSuite OAuth wiring:
- * the netsuite OAuth client, a NetSuite auth context (auth.tsx), and the
- * AuthLayout / LoginPage / SignInWithNetSuite components. It never
- * overwrites a scaffold file -- the one manual step is wrapping the root
- * route's <Outlet /> with <AuthLayout> (the tool's output shows the
- * snippet). All NetSuite-specific templates live in this file -- one place
- * to read or change anything NetSuite-related.
+ * Adds NetSuite OAuth wiring on top of an existing scaffold: the netsuite
+ * OAuth client, a NetSuite auth context (auth.tsx), and the AuthLayout /
+ * LoginPage / SignInWithNetSuite components. It never overwrites a
+ * scaffold file -- the one manual step is wrapping the root route's
+ * <Outlet /> with <AuthLayout> (the tool's output shows the snippet).
+ * All NetSuite-specific templates live in this file -- one place to read
+ * or change anything NetSuite-related.
  *
- * Use INSTEAD of `scaffold` when the project needs NetSuite. The tool
- * name carries the intent so the LLM can't accidentally ship a project
- * without the auth files.
+ * Called AFTER `scaffold`, never instead of it.
  */
 
 function netsuiteTs(): string {
@@ -342,21 +338,13 @@ function Gate({ children }: { children: ReactNode }) {
 
 export const setupNetsuite = tool({
 	description:
-		"Bootstrap a NetSuite-backed React + Vite + Tailwind v4 + TanStack Router " +
-		"project in one call. Writes the full HelloLeo base scaffold PLUS the " +
-		"NetSuite OAuth wiring, all ADDITIVE -- it never overwrites a scaffold " +
-		"file. Adds src/lib/netsuite.ts (OAuth client), src/lib/auth.tsx " +
-		"(NetSuiteAuthProvider + useNetSuiteAuth), and " +
-		"src/components/auth/{AuthLayout,LoginPage,SignInWithNetSuite}.tsx. " +
-		"Use this INSTEAD of `scaffold` for any project that needs NetSuite. " +
-		"After it runs there is exactly ONE manual step: wrap the root route's " +
-		"<Outlet /> with <AuthLayout> in src/routes/__root.tsx (the tool's output " +
-		"shows the snippet). Real OAuth is wired from day one -- never replace " +
-		"<AuthLayout> with a password placeholder.",
+		"Add NetSuite OAuth wiring to an existing project. Call scaffold first, " +
+		"then this. Writes the OAuth client, auth provider and login components. " +
+		"All files are additive, nothing is overwritten. Real OAuth is wired " +
+		"from day one, never replace <AuthLayout> with a password placeholder.",
 	args: {},
 	async execute(_args, context) {
 		const dir = context.directory;
-		const base = await writeBaseScaffold({}, dir);
 
 		await mkdir(path.join(dir, "src", "components", "auth"), {
 			recursive: true,
@@ -384,45 +372,27 @@ export const setupNetsuite = tool({
 			await Bun.write(path.join(dir, filePath), content);
 		}
 
-		const all = [...base, ...nsFiles.map(([f]) => f)];
 		return [
-			`Generated ${all.length} files (base scaffold + NetSuite OAuth, all additive -- nothing overwritten).`,
+			`Wrote ${nsFiles.length} NetSuite OAuth files (all additive, nothing overwritten):`,
+			"  - src/lib/netsuite.ts (OAuth client: signIn, session, workerFetch)",
+			"  - src/lib/auth.tsx (NetSuiteAuthProvider and useNetSuiteAuth)",
+			"  - src/components/auth/AuthLayout.tsx (provider and auth gate)",
+			"  - src/components/auth/LoginPage.tsx (unauthenticated view)",
+			"  - src/components/auth/SignInWithNetSuite.tsx (sign-in button)",
 			"",
-			"All you need to do is wrap the root layout with the auth layout.",
-			"In src/routes/__root.tsx, import AuthLayout and wrap <Outlet />:",
+			"Notes:",
+			"- AuthLayout shows LoginPage to signed-out users and renders the app's routes once they sign in with NetSuite.",
+			"- Read the session anywhere with useNetSuiteAuth() from src/lib/auth.tsx.",
+			"- Never replace AuthLayout with a password gate. Real OAuth is the only supported login.",
+			"- The auth worker (deployed via the cloudflare-backend MCP) serves /auth/netsuite/start, /auth/netsuite/callback, /api/me and /auth/netsuite/logout. It reads env.NETSUITE_ACCOUNT_ID, _CLIENT_ID and _CLIENT_SECRET. VITE_WORKER_URL must be set (HelloLeo Cloud seeds it).",
 			"",
-			"    import { AuthLayout } from '../components/auth/AuthLayout'",
-			"",
-			"    function RootComponent() {",
-			"      return (",
-			"        <>",
-			"          <AuthLayout>",
-			"            <Outlet />",
-			"          </AuthLayout>",
-			"          {/* keep the existing <TanStackDevtools ... /> here */}",
-			"        </>",
-			"      )",
-			"    }",
+			"Next: in src/routes/__root.tsx, import AuthLayout and wrap <Outlet /> with it. Keep any existing providers.",
 			"",
-			"That single wrap gates every route: <LoginPage /> until the user signs",
-			"in with NetSuite, your routes after. Read the session anywhere below it",
-			"with useNetSuiteAuth() from src/lib/auth.tsx. NEVER swap <AuthLayout>",
-			"for a password gate -- real OAuth is the only supported login.",
-			"",
-			"NetSuite OAuth files written:",
-			"  - src/lib/netsuite.ts          OAuth client (signIn / session / workerFetch)",
-			"  - src/lib/auth.tsx             NetSuiteAuthProvider + useNetSuiteAuth",
-			"  - src/components/auth/AuthLayout.tsx        provider + gate (wrap root with this)",
-			"  - src/components/auth/LoginPage.tsx         unauthenticated view",
-			"  - src/components/auth/SignInWithNetSuite.tsx sign-in button",
+			"    import { AuthLayout } from '../components/auth/AuthLayout'",
 			"",
-			"Worker (deploy via cloudflare-backend MCP) must serve:",
-			"      GET  /auth/netsuite/start     -- redirect to NetSuite OAuth",
-			"      GET  /auth/netsuite/callback  -- code -> token exchange",
-			"      GET  /api/me                  -- current session",
-			"      POST /auth/netsuite/logout    -- clear session",
-			"    Reads env.NETSUITE_ACCOUNT_ID / _CLIENT_ID / _CLIENT_SECRET.",
-			"    VITE_WORKER_URL must be set (HelloLeo Cloud provisioner seeds it).",
+			"    <AuthLayout>",
+			"      <Outlet />",
+			"    </AuthLayout>",
 		].join("\n");
 	},
 });

package/dist/templates/tanstack-start-2026-06-18/wrangler.jsonc

@@ -1,27 +0,0 @@
-{
-  "$schema": "node_modules/wrangler/config-schema.json",
-  "name": "{{LEO_NAME}}",
-  "compatibility_date": "2025-09-02",
-  "compatibility_flags": ["nodejs_compat"],
-  // @cloudflare/vite-plugin builds the Worker from the TanStack Start server
-  // entry; src/server.ts wraps it. These three bindings are the PROD path that
-  // the dev cf-shim emulates locally — keep the names DB / KV / BUCKET, that is
-  // the contract @helloleo/runtime expects.
-  "main": "src/server.ts",
-  "observability": { "enabled": true },
-  // Provision real resources before deploy (`wrangler d1/kv/r2 create`) and swap
-  // the placeholder ids below. In dev none of this matters — the cf-shim backs
-  // DB with libsql (.dev.db), KV in libsql, and R2 on the local filesystem.
-  "d1_databases": [
-    {
-      "binding": "DB",
-      "database_name": "{{LEO_NAME}}",
-      "database_id": "REPLACE_WITH_D1_ID",
-      // drizzle-kit generate writes migrations here; `wrangler d1 migrations
-      // apply DB --remote` reads this dir to apply them to prod D1.
-      "migrations_dir": "drizzle"
-    }
-  ],
-  "kv_namespaces": [{ "binding": "KV", "id": "REPLACE_WITH_KV_ID" }],
-  "r2_buckets": [{ "binding": "BUCKET", "bucket_name": "{{LEO_NAME}}" }]
-}

package/src/templates/tanstack-start-2026-06-18/wrangler.jsonc

@@ -1,27 +0,0 @@
-{
-  "$schema": "node_modules/wrangler/config-schema.json",
-  "name": "{{LEO_NAME}}",
-  "compatibility_date": "2025-09-02",
-  "compatibility_flags": ["nodejs_compat"],
-  // @cloudflare/vite-plugin builds the Worker from the TanStack Start server
-  // entry; src/server.ts wraps it. These three bindings are the PROD path that
-  // the dev cf-shim emulates locally — keep the names DB / KV / BUCKET, that is
-  // the contract @helloleo/runtime expects.
-  "main": "src/server.ts",
-  "observability": { "enabled": true },
-  // Provision real resources before deploy (`wrangler d1/kv/r2 create`) and swap
-  // the placeholder ids below. In dev none of this matters — the cf-shim backs
-  // DB with libsql (.dev.db), KV in libsql, and R2 on the local filesystem.
-  "d1_databases": [
-    {
-      "binding": "DB",
-      "database_name": "{{LEO_NAME}}",
-      "database_id": "REPLACE_WITH_D1_ID",
-      // drizzle-kit generate writes migrations here; `wrangler d1 migrations
-      // apply DB --remote` reads this dir to apply them to prod D1.
-      "migrations_dir": "drizzle"
-    }
-  ],
-  "kv_namespaces": [{ "binding": "KV", "id": "REPLACE_WITH_KV_ID" }],
-  "r2_buckets": [{ "binding": "BUCKET", "bucket_name": "{{LEO_NAME}}" }]
-}