@lukoweb/apitogo 0.2.47 → 0.2.50

package/dist/cli/cli.js

@@ -757,12 +757,12 @@ var init_transform_config = __esm({
 
 // src/config/apitogo-config-loader.node.ts
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
-import path17 from "node:path";
+import path18 from "node:path";
 function loadApitogoConfig(rootDir = process.cwd()) {
-  const configPath = path17.join(path17.resolve(rootDir), APITOGO_CONFIG_FILENAME);
+  const configPath = path18.join(path18.resolve(rootDir), APITOGO_CONFIG_FILENAME);
   if (!existsSync3(configPath)) {
     throw new Error(
-      `Missing ${APITOGO_CONFIG_FILENAME} in ${path17.resolve(rootDir)}`
+      `Missing ${APITOGO_CONFIG_FILENAME} in ${path18.resolve(rootDir)}`
     );
   }
   const raw = readFileSync3(configPath, "utf8");
@@ -837,7 +837,7 @@ import { stat as stat4 } from "node:fs/promises";
 var fileExists;
 var init_file_exists = __esm({
   "src/config/file-exists.ts"() {
-    fileExists = (path95) => stat4(path95).then(() => true).catch(() => false);
+    fileExists = (path97) => stat4(path97).then(() => true).catch(() => false);
   }
 });
 
@@ -1095,7 +1095,7 @@ var init_landing_manifest = __esm({
 });
 
 // src/config/local-manifest.ts
-import path18 from "node:path";
+import path19 from "node:path";
 import { z as z7 } from "zod";
 function isPricingEnabled(manifest) {
   return manifest?.pricing?.enabled === true;
@@ -1148,8 +1148,8 @@ function resolveManifestEnv(viteMode) {
   return viteMode === "production" ? "production" : "development";
 }
 function manifestPathsForEnv(rootDir, _env) {
-  const resolvedRoot = path18.resolve(rootDir);
-  const configPath = path18.join(resolvedRoot, APITOGO_CONFIG_FILENAME);
+  const resolvedRoot = path19.resolve(rootDir);
+  const configPath = path19.join(resolvedRoot, APITOGO_CONFIG_FILENAME);
   return {
     basePath: configPath,
     overridePath: configPath,
@@ -1841,7 +1841,7 @@ var init_shadcn_registry = __esm({
 
 // src/vite/plugin-theme.ts
 import { createRequire } from "node:module";
-import path19 from "node:path";
+import path20 from "node:path";
 import { normalizeTheme } from "shiki";
 var THEME_VARIABLES, uncamelize, processColorValue, generateCss, generateRegistryCss, processCustomCss, MAIN_REPLACE, DEFAULT_THEME_REPLACE, GOOGLE_FONTS, getGoogleFontUrl, processFont, processFontConfig, bundledFont, DEFAULT_FONT_SANS, DEFAULT_FONT_MONO, DEFAULT_FONT_HEADING, processFonts, MODULE_SOURCE_PACKAGES, resolveModuleSourceDirs, virtualModuleId, resolvedVirtualModuleId, viteThemePlugin;
 var init_plugin_theme = __esm({
@@ -1956,11 +1956,11 @@ var init_plugin_theme = __esm({
       };
     };
     bundledFont = (pkg) => {
-      const dir = path19.dirname(
+      const dir = path20.dirname(
         createRequire(import.meta.url).resolve(`@fontsource/${pkg}/package.json`)
       );
       return [400, 500, 600, 700].map(
-        (weight) => path19.join(dir, `latin-${weight}.css`).split(path19.sep).join("/")
+        (weight) => path20.join(dir, `latin-${weight}.css`).split(path20.sep).join("/")
       );
     };
     DEFAULT_FONT_SANS = '"IBM Plex Sans", system-ui, sans-serif';
@@ -2029,7 +2029,7 @@ var init_plugin_theme = __esm({
     resolveModuleSourceDirs = (config2) => {
       if (config2.__meta.mode === "internal") {
         return MODULE_SOURCE_PACKAGES.map(
-          (pkg) => path19.join(
+          (pkg) => path20.join(
             config2.__meta.moduleDir,
             "..",
             pkg.replace("@lukoweb/apitogo-", ""),
@@ -2038,12 +2038,12 @@ var init_plugin_theme = __esm({
         );
       }
       const require2 = createRequire(
-        path19.join(config2.__meta.rootDir, "package.json")
+        path20.join(config2.__meta.rootDir, "package.json")
       );
       const dirs = [];
       for (const pkg of MODULE_SOURCE_PACKAGES) {
         try {
-          dirs.push(path19.dirname(require2.resolve(pkg)));
+          dirs.push(path20.dirname(require2.resolve(pkg)));
         } catch {
         }
       }
@@ -2170,7 +2170,7 @@ ${rootVars.join("\n")}
               ...config2.__meta.dependencies,
               ...config2.__pluginDirs ?? [],
               ...resolveModuleSourceDirs(config2)
-            ].map((file) => path19.relative(path19.dirname(id), file))
+            ].map((file) => path20.relative(path20.dirname(id), file))
           );
           const code = [...files].map((file) => `@source "${file}";`);
           code.push("@theme inline {");
@@ -5012,7 +5012,7 @@ var init_ZudokuConfig = __esm({
 
 // src/config/loader.ts
 import { stat as stat5 } from "node:fs/promises";
-import path20 from "node:path";
+import path21 from "node:path";
 import colors6 from "picocolors";
 import {
   runnerImport,
@@ -5039,7 +5039,7 @@ function mergeJsonConfigWithRuntimeOverrides(fileConfig, importedConfig) {
 }
 async function getConfigFilePath(rootDir) {
   for (const fileName of zudokuConfigFiles) {
-    const filepath = path20.join(rootDir, fileName);
+    const filepath = path21.join(rootDir, fileName);
     if (await fileExists(filepath)) {
       return filepath;
     }
@@ -5268,7 +5268,7 @@ __export(llms_exports, {
   generateLlmsTxtFiles: () => generateLlmsTxtFiles
 });
 import { writeFile as writeFile12 } from "node:fs/promises";
-import path44 from "node:path";
+import path45 from "node:path";
 import colors10 from "picocolors";
 async function generateLlmsTxtFiles({
   markdownFileInfos,
@@ -5303,7 +5303,7 @@ async function generateLlmsTxtFiles({
       }
     }
     const llmsTxt2 = llmsTxtParts.join("\n");
-    await writeFile12(path44.join(baseOutputDir, "llms.txt"), llmsTxt2, "utf-8");
+    await writeFile12(path45.join(baseOutputDir, "llms.txt"), llmsTxt2, "utf-8");
     if (process.env.APITOGO_JSON_ONLY !== "1") {
       console.log(colors10.blue("\u2713 generated llms.txt"));
     }
@@ -5331,7 +5331,7 @@ ${info.content}
     }
     const llmsFull = llmsFullParts.join("\n");
     await writeFile12(
-      path44.join(baseOutputDir, "llms-full.txt"),
+      path45.join(baseOutputDir, "llms-full.txt"),
       llmsFull,
       "utf-8"
     );
@@ -5834,7 +5834,37 @@ Run the command with --help to see its options.`;
 import yargs from "yargs/yargs";
 
 // src/cli/services/handler.ts
-import path52 from "node:path";
+import path53 from "node:path";
+
+// src/config/v2/billing.ts
+import { readFile as readFile2 } from "node:fs/promises";
+var DEFAULT_STRIPE_KEY_SECRET = "STRIPE_API_KEY";
+function isPaidPlan(plan2) {
+  return plan2.pricingModel !== "custom" && typeof plan2.priceAmount === "number" && plan2.priceAmount > 0;
+}
+async function paidPlanSkus(resolved) {
+  const file = resolved.plans?.file;
+  if (!file) return [];
+  try {
+    const raw = JSON.parse(await readFile2(file, "utf8"));
+    if (!Array.isArray(raw.plans)) return [];
+    return raw.plans.filter(
+      (plan2) => typeof plan2 === "object" && plan2 !== null && isPaidPlan(plan2)
+    ).map((plan2) => String(plan2.sku ?? "?"));
+  } catch {
+    return [];
+  }
+}
+async function billingNeeded(resolved) {
+  const plans = resolved.plans;
+  if (!plans?.enabled || plans.billing.provider !== "stripe") return false;
+  return (await paidPlanSkus(resolved)).length > 0;
+}
+function stripeKeySecretName(resolved) {
+  const ref = resolved.plans?.billing.apiKey;
+  const match = ref ? /^secret:(.+)$/.exec(ref) : null;
+  return match?.[1] ?? DEFAULT_STRIPE_KEY_SECRET;
+}
 
 // src/config/v2/errors.ts
 init_invariant();
@@ -6043,8 +6073,8 @@ var ConfigV2Schema = z.strictObject({
 var REMOVED_KEYS = {
   "plans.provider": "plans.provider was removed. Only plans.billing.provider (stripe or none) is selectable."
 };
-function pathToString(path95) {
-  return path95.reduce(
+function pathToString(path97) {
+  return path97.reduce(
     (acc, segment) => typeof segment === "number" ? `${acc}[${segment}]` : acc === "" ? String(segment) : `${acc}.${String(segment)}`,
     ""
   );
@@ -6064,9 +6094,9 @@ function step(schema2, segment) {
   }
   return void 0;
 }
-function knownKeysAt(path95) {
+function knownKeysAt(path97) {
   let current = ConfigV2Schema;
-  for (const segment of path95) {
+  for (const segment of path97) {
     if (!current) return [];
     current = step(current, segment);
   }
@@ -6102,7 +6132,7 @@ function unknownKeyHint(fullPath, key, known) {
   return known.length > 0 ? `Allowed keys: ${known.join(", ")}.` : void 0;
 }
 function mapIssue(issue4) {
-  const path95 = pathToString(issue4.path);
+  const path97 = pathToString(issue4.path);
   switch (issue4.code) {
     case "unrecognized_keys":
       return issue4.keys.map((key) => {
@@ -6118,20 +6148,20 @@ function mapIssue(issue4) {
       return [
         {
           code: "CONFIG_INVALID_VALUE",
-          path: path95,
+          path: path97,
           message: `must be one of: ${issue4.values.map((v) => JSON.stringify(v)).join(", ")}.`
         }
       ];
     case "custom": {
       const code = typeof issue4.params?.code === "string" ? issue4.params.code : "CONFIG_INVALID_VALUE";
-      return [{ code, path: path95, message: issue4.message ?? "is invalid." }];
+      return [{ code, path: path97, message: issue4.message ?? "is invalid." }];
     }
     case "invalid_type":
       return [
-        /received undefined/.test(issue4.message) ? { code: "CONFIG_MISSING_FIELD", path: path95, message: "is required." } : { code: "CONFIG_INVALID_VALUE", path: path95, message: issue4.message }
+        /received undefined/.test(issue4.message) ? { code: "CONFIG_MISSING_FIELD", path: path97, message: "is required." } : { code: "CONFIG_INVALID_VALUE", path: path97, message: issue4.message }
       ];
     default:
-      return [{ code: "CONFIG_INVALID_VALUE", path: path95, message: issue4.message }];
+      return [{ code: "CONFIG_INVALID_VALUE", path: path97, message: issue4.message }];
   }
 }
 function isRecord(value) {
@@ -6453,7 +6483,7 @@ function resolveConfigV2(config2, configPath) {
       docs: {
         enabled: portal.docs?.enabled ?? true,
         provider,
-        content: provider === "external" ? [] : portal.docs?.content ? portal.docs.content.map((glob8) => fromConfig(configDir, glob8)) : [toGlobPath(path7.join(dir, "pages", "**", "*.{md,mdx}"))],
+        content: provider === "external" ? [] : portal.docs?.content ? portal.docs.content.map((glob9) => fromConfig(configDir, glob9)) : [toGlobPath(path7.join(dir, "pages", "**", "*.{md,mdx}"))],
         url: portal.docs?.url
       },
       console: { enabled: portal.console?.enabled ?? true },
@@ -6495,7 +6525,8 @@ function resolveConfigV2(config2, configPath) {
       file: plans.file ? path7.resolve(configDir, plans.file) : path7.join(root, "plans.json"),
       billing: {
         provider: plans.billing?.provider ?? "stripe",
-        apiKey: plans.billing?.apiKey,
+        // Stripe is the only provider. Its key lives in the STRIPE_API_KEY secret unless the config names another.
+        apiKey: plans.billing?.apiKey ?? ((plans.billing?.provider ?? "stripe") === "stripe" ? "secret:STRIPE_API_KEY" : void 0),
         webhookSecret: plans.billing?.webhookSecret,
         successUrl: plans.billing?.successUrl,
         cancelUrl: plans.billing?.cancelUrl
@@ -6575,10 +6606,141 @@ function loadConfigV2(pathOrDir) {
 }
 
 // src/config/v2/rules.ts
-import { readdir as readdir2, readFile as readFile2, stat as stat2 } from "node:fs/promises";
+import { readdir as readdir2, readFile as readFile4, stat as stat2 } from "node:fs/promises";
+import path10 from "node:path";
+import { glob as glob2 } from "glob";
+import { parse as parseYaml } from "yaml";
+
+// src/config/v2/tsx-pages.ts
+import { readFile as readFile3 } from "node:fs/promises";
 import path9 from "node:path";
 import { glob } from "glob";
-import { parse as parseYaml } from "yaml";
+import globParent from "glob-parent";
+
+// src/config/v2/docs-navigation.ts
+var DOCS_NAVIGATION_LABEL = "Documentation";
+var emptyBranch = () => ({ pages: /* @__PURE__ */ new Map(), folders: /* @__PURE__ */ new Map() });
+function folderLabel(name) {
+  const words = name.replace(/[-_]+/g, " ").trim();
+  return words.charAt(0).toUpperCase() + words.slice(1);
+}
+var byName = (a, b) => a.localeCompare(b);
+var toItems = (branch, prefix) => {
+  const names = [...branch.pages.keys()].sort(
+    (a, b) => a === "index" ? -1 : b === "index" ? 1 : byName(a, b)
+  );
+  const folders = [...branch.folders.keys()].sort(byName);
+  const folderPath = prefix === "" ? "/" : `/${prefix.slice(0, -1)}`;
+  return [
+    ...names.map((name) => {
+      const page = branch.pages.get(name);
+      if (page.kind === "custom") {
+        return {
+          type: "custom-page",
+          // The index page of a folder is the folder's own address.
+          path: name === "index" ? folderPath : page.route,
+          label: page.label,
+          element: page.element
+        };
+      }
+      return name === "index" ? { type: "doc", file: `${prefix}${name}`, path: folderPath } : `${prefix}${name}`;
+    }),
+    ...folders.map(
+      (folder) => ({
+        type: "category",
+        label: folderLabel(folder),
+        collapsible: true,
+        collapsed: false,
+        items: toItems(
+          branch.folders.get(folder) ?? emptyBranch(),
+          `${prefix}${folder}/`
+        )
+      })
+    )
+  ];
+};
+var branchOf = (root, route) => {
+  const parts = route.split("/").filter(Boolean);
+  const page = parts.pop();
+  const branch = parts.reduce((current, folder) => {
+    const next = current.folders.get(folder) ?? emptyBranch();
+    current.folders.set(folder, next);
+    return next;
+  }, root);
+  return { branch, page };
+};
+function docsNavigation(routes, customPages = []) {
+  const root = emptyBranch();
+  for (const route of routes) {
+    const { branch, page } = branchOf(root, route);
+    if (page) branch.pages.set(page, { kind: "doc" });
+  }
+  for (const custom of customPages) {
+    const { branch, page } = branchOf(root, custom.route);
+    if (page && !branch.pages.has(page))
+      branch.pages.set(page, { kind: "custom", ...custom });
+  }
+  const items = toItems(root, "");
+  return items.length === 0 ? [] : [{ type: "category", label: DOCS_NAVIGATION_LABEL, items }];
+}
+
+// src/config/v2/tsx-pages.ts
+var IGNORED = ["**/node_modules/**", "**/dist/**", "**/.git/**"];
+function isTsxHelper(relative) {
+  return relative.split("/").some((part) => part.startsWith("_")) || /\.(test|spec|stories)\.tsx$/.test(relative) || relative.split("/").includes("node_modules");
+}
+function tsxPagePatterns(contentGlobs) {
+  const globs = contentGlobs.map(toGlobPath);
+  const included = globs.filter((pattern) => !pattern.startsWith("!"));
+  const excluded = globs.filter((pattern) => pattern.startsWith("!"));
+  return [
+    ...new Set(
+      included.map(
+        (pattern) => path9.posix.join(globParent(pattern), "**", "*.tsx")
+      )
+    ),
+    ...excluded
+  ];
+}
+var TITLE = /export\s+const\s+title\s*(?::\s*string\s*)?=\s*(["'`])((?:\\.|(?!\1).)*)\1/;
+function tsxPageLabel(source, file) {
+  const match = TITLE.exec(source);
+  if (match?.[2]) return match[2].replace(/\\(.)/g, "$1");
+  const name = path9.basename(file, ".tsx");
+  return folderLabel(
+    name === "index" ? path9.basename(path9.dirname(file)) : name
+  );
+}
+async function findTsxPages(contentGlobs) {
+  const patterns = tsxPagePatterns(contentGlobs);
+  const ignore2 = [
+    ...IGNORED,
+    ...patterns.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1))
+  ];
+  const found = /* @__PURE__ */ new Map();
+  for (const pattern of patterns.filter((p) => !p.startsWith("!"))) {
+    const parent = globParent(pattern);
+    const files = await glob(pattern, {
+      absolute: true,
+      posix: true,
+      nodir: true,
+      ignore: ignore2
+    });
+    for (const raw of files.sort()) {
+      const file = raw.replace(/^\/\/\?\//, "");
+      const relative = path9.posix.relative(parent, file);
+      if (isTsxHelper(relative)) continue;
+      const route = `/${relative.replace(/\.tsx$/, "")}`;
+      if (found.has(route)) continue;
+      const source = await readFile3(file, "utf8").catch(() => "");
+      found.set(route, { route, file, label: tsxPageLabel(source, file) });
+    }
+  }
+  return [...found.values()].sort((a, b) => a.route.localeCompare(b.route));
+}
+var TSX_PAGE_ELEMENT_PREFIX = "apitogo:tsx-page:";
+
+// src/config/v2/rules.ts
 var SPEC_MAX_BYTES = 5 * 1024 * 1024;
 var SECRET_REFERENCE2 = /^secret:([A-Za-z_][A-Za-z0-9_]*)$/;
 async function isFile(target) {
@@ -6727,13 +6889,13 @@ async function portalRules(config2, resolved, out) {
   }
   if (await isFile(portal.theme)) {
     try {
-      JSON.parse(await readFile2(portal.theme, "utf8"));
+      JSON.parse(await readFile4(portal.theme, "utf8"));
     } catch (error) {
       out.error({
         code: "PORTAL_THEME_INVALID",
         path: "portal.theme",
         message: `the theme file is not valid JSON (${error instanceof Error ? error.message : String(error)}).`,
-        hint: path9.relative(resolved.configDir, portal.theme)
+        hint: path10.relative(resolved.configDir, portal.theme)
       });
     }
   }
@@ -6742,16 +6904,17 @@ async function docsContentRule(config2, patterns, resolved, out) {
   const globs = patterns.map(toGlobPath);
   const include = globs.filter((pattern) => !pattern.startsWith("!"));
   const ignore2 = globs.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1));
-  const matches = include.length > 0 ? await glob(include, { nodir: true, ignore: ignore2, absolute: true }) : [];
+  const matches = include.length > 0 ? await glob2(include, { nodir: true, ignore: ignore2, absolute: true }) : [];
   if (matches.length > 0) return;
+  if ((await findTsxPages(patterns)).length > 0) return;
   const shown = config2.portal?.docs?.content ?? [
-    path9.relative(resolved.configDir, patterns[0] ?? "")
+    path10.relative(resolved.configDir, patterns[0] ?? "")
   ];
   out.warn({
     code: "PORTAL_DOCS_EMPTY",
     path: "portal.docs",
     message: `portal.docs matched 0 files (${shown.join(", ")}). The site will only contain the API reference.`,
-    hint: "Add .md or .mdx files, or point docs.content at your existing docs."
+    hint: "Add .md, .mdx or .tsx pages, or point docs.content at your existing docs."
   });
 }
 function isIpLiteral(hostname) {
@@ -6818,8 +6981,8 @@ async function gatewayRules(resolved, out) {
       }
     }
     if (origin.source) {
-      const inside = path9.relative(resolved.configDir, origin.source);
-      if (inside.startsWith("..") || path9.isAbsolute(inside)) {
+      const inside = path10.relative(resolved.configDir, origin.source);
+      if (inside.startsWith("..") || path10.isAbsolute(inside)) {
         out.error({
           code: "GATEWAY_ORIGIN_INVALID",
           path: "gateway.origin.source",
@@ -6904,7 +7067,7 @@ async function gatewayRules(resolved, out) {
 }
 async function specRule(spec, index, resolved, out) {
   const at = `gateway.specs[${index}]`;
-  const shown = path9.relative(resolved.configDir, spec);
+  const shown = path10.relative(resolved.configDir, spec);
   const info = await stat2(spec).catch(() => void 0);
   if (!info?.isFile()) {
     out.error({
@@ -6924,7 +7087,7 @@ async function specRule(spec, index, resolved, out) {
   }
   let document;
   try {
-    const text = await readFile2(spec, "utf8");
+    const text = await readFile4(spec, "utf8");
     document = spec.toLowerCase().endsWith(".json") ? JSON.parse(text) : parseYaml(text);
   } catch (error) {
     out.error({
@@ -7066,19 +7229,19 @@ function identityRules(config2, resolved, out) {
     }
   }
 }
-async function plansRules(config2, resolved, out) {
+async function plansRules(resolved, out, paid) {
   const plans = resolved.plans;
   if (!plans?.enabled) return;
   if (!await isFile(plans.file)) {
     out.error({
       code: "PLANS_FILE_INVALID",
       path: "plans.file",
-      message: `the plan catalog was not found: ${path9.relative(resolved.configDir, plans.file)}.`,
+      message: `the plan catalog was not found: ${path10.relative(resolved.configDir, plans.file)}.`,
       hint: "Create it with `apitogo add plans`."
     });
   } else {
     try {
-      JSON.parse(await readFile2(plans.file, "utf8"));
+      JSON.parse(await readFile4(plans.file, "utf8"));
     } catch (error) {
       out.error({
         code: "PLANS_FILE_INVALID",
@@ -7087,15 +7250,7 @@ async function plansRules(config2, resolved, out) {
       });
     }
   }
-  if (plans.billing.provider === "stripe") {
-    if (!config2.plans?.billing?.apiKey) {
-      out.error({
-        code: "PLANS_BILLING_INCOMPLETE",
-        path: "plans.billing.apiKey",
-        message: "plans.billing.apiKey is required when billing.provider is stripe.",
-        hint: 'Set it to a secret reference, for example "secret:STRIPE_API_KEY".'
-      });
-    }
+  if (paid) {
     const headless = !(resolved.portal?.enabled === true);
     for (const field of ["successUrl", "cancelUrl"]) {
       if (headless && !plans.billing[field]) {
@@ -7109,8 +7264,12 @@ async function plansRules(config2, resolved, out) {
     }
   }
 }
-function secretRules(config2, context, out, skipped) {
-  const refs = collectSecretRefs(config2);
+function secretRules(config2, resolved, context, out, skipped, paid) {
+  const stripeKeyPath = "plans.billing.apiKey";
+  const named = collectSecretRefs(config2).filter(
+    (ref) => paid || !ref.path.startsWith("plans.billing")
+  );
+  const refs = paid && !named.some((ref) => ref.path === stripeKeyPath) ? [...named, { name: stripeKeySecretName(resolved), path: stripeKeyPath }] : named;
   if (refs.length === 0) return;
   if (!context.knownSecrets) {
     skipped.push(
@@ -7119,7 +7278,14 @@ function secretRules(config2, context, out, skipped) {
     return;
   }
   for (const ref of refs) {
-    if (!context.knownSecrets.has(ref.name)) {
+    if (ref.path === stripeKeyPath && !context.knownSecrets.has(ref.name)) {
+      out.warn({
+        code: "SECRET_NOT_SET",
+        path: ref.path,
+        message: `a plan has a price, and the Stripe key (secret ${ref.name}) is not set yet.`,
+        hint: `apitogo deploy asks for it. Or run: apitogo secrets set ${ref.name}`
+      });
+    } else if (!context.knownSecrets.has(ref.name)) {
       out.error({
         code: "SECRET_NOT_SET",
         path: ref.path,
@@ -7139,12 +7305,13 @@ async function checkConfigV2(config2, resolved, context = {}) {
     error: (issue4) => errors.push(issue4),
     warn: (issue4) => warnings.push(issue4)
   };
+  const paid = await billingNeeded(resolved);
   dependencyRules(config2, resolved, out);
-  secretRules(config2, context, out, skipped);
+  secretRules(config2, resolved, context, out, skipped, paid);
   await portalRules(config2, resolved, out);
   await gatewayRules(resolved, out);
   identityRules(config2, resolved, out);
-  await plansRules(config2, resolved, out);
+  await plansRules(resolved, out, paid);
   return { errors, warnings, skipped };
 }
 
@@ -7190,8 +7357,8 @@ function portalProfile(resolved) {
 }
 
 // src/config/v2/manifest.ts
-import { mkdir as mkdir3, readFile as readFile3, rename, rm, writeFile as writeFile4 } from "node:fs/promises";
-import path10 from "node:path";
+import { mkdir as mkdir3, readFile as readFile5, rename, rm, writeFile as writeFile4 } from "node:fs/promises";
+import path11 from "node:path";
 import { z as z3 } from "zod";
 var SUPPORTED_MANIFEST_SCHEMA = 1;
 var Capabilities = z3.record(z3.string(), z3.boolean()).default({});
@@ -7240,7 +7407,7 @@ var ServiceManifestSchema = z3.looseObject({
     }).optional()
   }).default({})
 });
-var issue = (code, path95, message, hint) => ({ code, path: path95, message, hint });
+var issue = (code, path97, message, hint) => ({ code, path: path97, message, hint });
 function parseManifest(raw, file = "services.json") {
   const version = typeof raw === "object" && raw !== null && "schemaVersion" in raw ? raw.schemaVersion : void 0;
   if (typeof version === "number" && version > SUPPORTED_MANIFEST_SCHEMA) {
@@ -7273,7 +7440,7 @@ async function readManifest(state) {
   const file = manifestPathFor(state);
   let text;
   try {
-    text = await readFile3(file, "utf8");
+    text = await readFile5(file, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -7457,7 +7624,7 @@ function withPlansEntry(existing, info) {
 }
 async function writeManifest(state, manifest) {
   const file = manifestPathFor(state);
-  await mkdir3(path10.dirname(file), { recursive: true });
+  await mkdir3(path11.dirname(file), { recursive: true });
   const temporary = `${file}.${process.pid}.tmp`;
   try {
     await writeFile4(
@@ -7488,7 +7655,7 @@ async function removeServicesFromManifest(state, names) {
 }
 
 // src/config/v2/gateway-reference.ts
-import { readFile as readFile4 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 import { parse } from "yaml";
 var DEFAULT_KEY_HEADER = "Ocp-Apim-Subscription-Key";
 var METHODS = [
@@ -7502,8 +7669,8 @@ var METHODS = [
   "trace"
 ];
 var isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-function actionKey(method, path95) {
-  const trimmed = path95.trim();
+function actionKey(method, path97) {
+  const trimmed = path97.trim();
   const withSlash = trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
   const normalized = withSlash.length > 1 ? withSlash.replace(/\/+$/, "") || "/" : withSlash;
   return `${method.trim().toLowerCase()}:${normalized}`;
@@ -7540,8 +7707,8 @@ var ReferenceSpecError = class extends Error {
 };
 function operationsOf(paths) {
   return Object.entries(paths).flatMap(
-    ([path95, item]) => isObject(item) ? METHODS.filter((method) => isObject(item[method])).map(
-      (method) => [path95, item, method]
+    ([path97, item]) => isObject(item) ? METHODS.filter((method) => isObject(item[method])).map(
+      (method) => [path97, item, method]
     ) : []
   );
 }
@@ -7556,14 +7723,14 @@ function buildReferenceSpec(specText, options) {
     throw new ReferenceSpecError("The OpenAPI file could not be read.");
   const doc = structuredClone(root);
   const paths = isObject(doc.paths) ? doc.paths : {};
-  for (const [path95, item, method] of operationsOf(paths))
-    if (options.deniedOperations.has(actionKey(method, path95)))
+  for (const [path97, item, method] of operationsOf(paths))
+    if (options.deniedOperations.has(actionKey(method, path97)))
       delete item[method];
-  for (const [path95, item] of Object.entries(paths))
+  for (const [path97, item] of Object.entries(paths))
     if (!isObject(item) || !METHODS.some((method) => method in item))
-      delete paths[path95];
-  for (const [path95, item, method] of operationsOf(paths))
-    if (options.publicOperations.has(actionKey(method, path95)))
+      delete paths[path97];
+  for (const [path97, item, method] of operationsOf(paths))
+    if (options.publicOperations.has(actionKey(method, path97)))
       item[method].security = [];
   doc.servers = [{ url: options.gatewayBaseUrl.replace(/\/+$/, "") }];
   for (const item of Object.values(paths)) {
@@ -7626,7 +7793,7 @@ async function renderReferenceSpec(gateway, gatewayBaseUrl, keyHeaderName) {
     throw new ReferenceSpecError("gateway.specs lists no OpenAPI file.");
   let text;
   try {
-    text = await readFile4(file, "utf8");
+    text = await readFile6(file, "utf8");
   } catch {
     throw new ReferenceSpecError(`Cannot read the OpenAPI file ${file}.`);
   }
@@ -7697,69 +7864,16 @@ function stableJson(value) {
 }
 
 // src/config/v2/wrapper.ts
-import { mkdir as mkdir4, readFile as readFile6, rename as rename2, rm as rm2, writeFile as writeFile5 } from "node:fs/promises";
-import path12 from "node:path";
-
-// src/config/v2/docs-navigation.ts
-var DOCS_NAVIGATION_LABEL = "Documentation";
-var emptyBranch = () => ({ pages: /* @__PURE__ */ new Set(), folders: /* @__PURE__ */ new Map() });
-function folderLabel(name) {
-  const words = name.replace(/[-_]+/g, " ").trim();
-  return words.charAt(0).toUpperCase() + words.slice(1);
-}
-var byName = (a, b) => a.localeCompare(b);
-var toItems = (branch, prefix) => {
-  const pages = [...branch.pages].sort(
-    (a, b) => a === "index" ? -1 : b === "index" ? 1 : byName(a, b)
-  );
-  const folders = [...branch.folders.keys()].sort(byName);
-  return [
-    // The index page of a folder is the folder's own address, so the sidebar also shows on `/`.
-    ...pages.map(
-      (page) => page === "index" ? {
-        type: "doc",
-        file: `${prefix}${page}`,
-        path: prefix === "" ? "/" : `/${prefix.slice(0, -1)}`
-      } : `${prefix}${page}`
-    ),
-    ...folders.map(
-      (folder) => ({
-        type: "category",
-        label: folderLabel(folder),
-        collapsible: true,
-        collapsed: false,
-        items: toItems(
-          branch.folders.get(folder) ?? emptyBranch(),
-          `${prefix}${folder}/`
-        )
-      })
-    )
-  ];
-};
-function docsNavigation(routes) {
-  const root = emptyBranch();
-  for (const route of routes) {
-    const parts = route.split("/").filter(Boolean);
-    const page = parts.pop();
-    if (!page) continue;
-    const branch = parts.reduce((current, folder) => {
-      const next = current.folders.get(folder) ?? emptyBranch();
-      current.folders.set(folder, next);
-      return next;
-    }, root);
-    branch.pages.add(page);
-  }
-  const items = toItems(root, "");
-  return items.length === 0 ? [] : [{ type: "category", label: DOCS_NAVIGATION_LABEL, items }];
-}
+import { mkdir as mkdir4, readFile as readFile8, rename as rename2, rm as rm2, writeFile as writeFile5 } from "node:fs/promises";
+import path13 from "node:path";
 
 // src/config/v2/home-redirect.ts
-import path11 from "node:path";
-import { glob as glob2 } from "glob";
-import globParent from "glob-parent";
+import path12 from "node:path";
+import { glob as glob3 } from "glob";
+import globParent2 from "glob-parent";
 
 // src/lib/util/readFrontmatter.ts
-import { readFile as readFile5 } from "node:fs/promises";
+import { readFile as readFile7 } from "node:fs/promises";
 import matter from "gray-matter";
 import { parse as parse2, stringify } from "yaml";
 var yaml = {
@@ -7767,25 +7881,25 @@ var yaml = {
   stringify: (obj) => stringify(obj)
 };
 var readFrontmatter = async (filePath) => {
-  const content = await readFile5(filePath, "utf-8");
+  const content = await readFile7(filePath, "utf-8");
   const normalizedContent = content.replace(/\r\n/g, "\n");
   return matter(normalizedContent, { engines: { yaml } });
 };
 
 // src/config/v2/home-redirect.ts
-var IGNORED = ["**/node_modules/**", "**/dist/**", "**/.git/**"];
+var IGNORED2 = ["**/node_modules/**", "**/dist/**", "**/.git/**"];
 async function docRoutes(patterns, options = {}) {
   const globs = patterns.map(toGlobPath);
   const excluded = globs.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1));
   const included = globs.filter((pattern) => !pattern.startsWith("!"));
   const routes = await Promise.all(
     included.map(async (pattern) => {
-      const files = await glob2(pattern, {
+      const files = await glob3(pattern, {
         absolute: true,
         posix: true,
-        ignore: [...IGNORED, ...excluded]
+        ignore: [...IGNORED2, ...excluded]
       });
-      const parent = globParent(pattern);
+      const parent = globParent2(pattern);
       const published = options.includeDrafts ? files : (await Promise.all(
         files.map(async (file) => ({
           file,
@@ -7793,7 +7907,7 @@ async function docRoutes(patterns, options = {}) {
         }))
       )).filter(({ draft }) => !draft).map(({ file }) => file);
       return published.map(
-        (file) => `/${path11.posix.relative(parent, file.replace(/^\/\/\?\//, "")).replace(/\.mdx?$/, "")}`
+        (file) => `/${path12.posix.relative(parent, file.replace(/^\/\/\?\//, "")).replace(/\.mdx?$/, "")}`
       );
     })
   );
@@ -7842,10 +7956,10 @@ function protectedRoutesFor(input5) {
 // src/config/v2/wrapper.ts
 var WRAPPER_FILE = "apitogo.config.tsx";
 var CONTENT_LINK = "content";
-function contentGlob(configDir, glob8) {
-  const negated = glob8.startsWith("!");
-  const absolute = negated ? glob8.slice(1) : glob8;
-  const relative = path12.relative(configDir, absolute).split(path12.sep).join("/");
+function contentGlob(configDir, glob9) {
+  const negated = glob9.startsWith("!");
+  const absolute = negated ? glob9.slice(1) : glob9;
+  const relative = path13.relative(configDir, absolute).split(path13.sep).join("/");
   return `${negated ? "!" : ""}/${CONTENT_LINK}/${relative}`;
 }
 var PLANS_CONSOLE_CAPABILITIES = [
@@ -8014,7 +8128,7 @@ function buildSiteConfig(resolved, plan2, theme, extras = {}) {
           enabled: true,
           path: "/",
           layout: "landing",
-          page: portal.landing.split(path12.sep).join("/")
+          page: portal.landing.split(path13.sep).join("/")
         }
       } : {},
       // The plans pages (pricing, choosing a plan) exist only when billing is on, and the plans service is what makes it so.
@@ -8031,7 +8145,7 @@ function buildSiteConfig(resolved, plan2, theme, extras = {}) {
     ...plan2.docs ? {
       docs: {
         files: portal?.docs.content.map(
-          (glob8) => contentGlob(resolved.configDir, glob8)
+          (glob9) => contentGlob(resolved.configDir, glob9)
         )
       }
     } : {},
@@ -8077,33 +8191,72 @@ function authenticationFor(plan2) {
   return { type: "openid", ...signIn };
 }
 var PREVIEW_BANNER_MESSAGE = "Preview mode: sign in with demo@apitogo.local / password to try the console. Run `apitogo deploy` for the real services.";
-function renderWrapper(plan2) {
+function renderWrapper(plan2, pages = []) {
   const imports = [
     'import { buildApitogoConfig } from "@lukoweb/apitogo/build-config";',
     ...plan2.plansPlugin ? [
       'import { devPortalBillingPlugin } from "@lukoweb/apitogo-plugin-dev-portal-billing";'
     ] : [],
+    ...pages.length > 0 ? ['import { createElement } from "react";'] : [],
+    ...pages.map(
+      (page, index) => `import TsxPage${index} from ${JSON.stringify(page.importPath)};`
+    ),
     `import siteConfig from "./${SITE_CONFIG_FILE}";`
   ];
   const plugins = plan2.plansPlugin ? `[devPortalBillingPlugin(${JSON.stringify(plan2.plansPlugin)})]` : "[]";
+  const pageLines = pages.length === 0 ? [] : [
+    "",
+    "// React docs pages: each sidebar placeholder becomes the page's component.",
+    "const tsxPages: Record<string, any> = {",
+    ...pages.map(
+      (page, index) => `  ${JSON.stringify(page.id)}: TsxPage${index},`
+    ),
+    "};",
+    "const withTsxPages = (items: any[]): any[] =>",
+    "  items.map((item) => {",
+    '    if (item === null || typeof item !== "object") return item;',
+    "    const page =",
+    '      typeof item.element === "string" ? tsxPages[item.element] : undefined;',
+    "    return {",
+    "      ...item,",
+    "      ...(page ? { element: createElement(page) } : {}),",
+    "      ...(Array.isArray(item.items) ? { items: withTsxPages(item.items) } : {}),",
+    "    };",
+    "  });"
+  ];
   return [
     "// Generated by apitogo from apitogo.config.json and services.json. Do not edit: it is rewritten on every build.",
     ...plan2.preview ? [
       "// PREVIEW: built from a stand-in manifest for local runs. A production build refuses this file."
     ] : [],
     ...imports,
+    ...pageLines,
     "",
-    "export default buildApitogoConfig({",
-    "  ...siteConfig,",
-    `  plugins: ${plugins},`,
-    "});",
+    // The components go in after buildApitogoConfig: it copies the config with structuredClone, which cannot copy a
+    // React element.
+    ...pages.length > 0 ? [
+      "const config = buildApitogoConfig({",
+      "  ...siteConfig,",
+      `  plugins: ${plugins},`,
+      "});",
+      "",
+      "export default {",
+      "  ...config,",
+      "  navigation: withTsxPages((config as any).navigation ?? []),",
+      "};"
+    ] : [
+      "export default buildApitogoConfig({",
+      "  ...siteConfig,",
+      `  plugins: ${plugins},`,
+      "});"
+    ],
     ""
   ].join("\n");
 }
 async function readDemoPlans(file) {
   if (!file) return void 0;
   try {
-    const parsed = JSON.parse(await readFile6(file, "utf8"));
+    const parsed = JSON.parse(await readFile8(file, "utf8"));
     return Array.isArray(parsed.plans) ? parsed.plans : void 0;
   } catch {
     return void 0;
@@ -8113,7 +8266,7 @@ async function readTheme(resolved) {
   const file = resolved.portal?.theme;
   if (!file) return void 0;
   try {
-    return JSON.parse(await readFile6(file, "utf8"));
+    return JSON.parse(await readFile8(file, "utf8"));
   } catch {
     return void 0;
   }
@@ -8171,9 +8324,19 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
       });
     }
   }
-  const hostedDocRoutes = plan2.docs ? await docRoutes(profile.docs.content, {
+  const markdownRoutes = plan2.docs ? await docRoutes(profile.docs.content, {
     includeDrafts: mode === "development"
   }) : [];
+  const tsxPages = plan2.docs ? (await findTsxPages(profile.docs.content)).filter(
+    (page) => !markdownRoutes.includes(page.route)
+  ) : [];
+  const wrapperPages = tsxPages.map((page, index) => ({
+    id: `${TSX_PAGE_ELEMENT_PREFIX}${index}`,
+    importPath: `./${CONTENT_LINK}/${path13.relative(resolved.configDir, page.file).split(path13.sep).join("/")}`
+  }));
+  const hostedDocRoutes = [
+    .../* @__PURE__ */ new Set([...markdownRoutes, ...tsxPages.map((page) => page.route)])
+  ].sort();
   if (plan2.plansPlugin && plan2.docs) {
     const landing = hostedDocRoutes.some(
       (route) => route === "/" || route === "/index"
@@ -8195,7 +8358,14 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
     await readTheme(resolved),
     {
       redirects: home ? [home] : [],
-      docsNavigation: docsNavigation(hostedDocRoutes),
+      docsNavigation: docsNavigation(
+        markdownRoutes,
+        tsxPages.map((page, index) => ({
+          route: page.route,
+          label: page.label,
+          element: wrapperPages[index]?.id ?? ""
+        }))
+      ),
       docsPath: pickLandingRoute(hostedDocRoutes),
       demoPlans: plan2.demo && plan2.plansPlugin ? await readDemoPlans(resolved.plans?.file) : void 0,
       protectedRoutes: protectedRoutesFor({
@@ -8206,21 +8376,21 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
       })
     }
   );
-  const wrapper = renderWrapper(plan2);
-  const wrapperPath = path12.join(resolved.state.generatedDir, WRAPPER_FILE);
+  const wrapper = renderWrapper(plan2, wrapperPages);
+  const wrapperPath = path13.join(resolved.state.generatedDir, WRAPPER_FILE);
   if (options.write !== false) {
-    await mkdir4(path12.dirname(wrapperPath), { recursive: true });
+    await mkdir4(path13.dirname(wrapperPath), { recursive: true });
     await writeFile5(
-      path12.join(path12.dirname(wrapperPath), SITE_CONFIG_FILE),
+      path13.join(path13.dirname(wrapperPath), SITE_CONFIG_FILE),
       `${JSON.stringify(siteConfig, null, 2)}
 `
     );
-    const referenceFile = path12.join(
-      path12.dirname(wrapperPath),
+    const referenceFile = path13.join(
+      path13.dirname(wrapperPath),
       REFERENCE_SPEC_FILE
     );
     if (referenceSpec !== void 0) {
-      await mkdir4(path12.dirname(referenceFile), { recursive: true });
+      await mkdir4(path13.dirname(referenceFile), { recursive: true });
       await writeFile5(referenceFile, referenceSpec);
     } else {
       await rm2(referenceFile, { force: true });
@@ -8249,9 +8419,9 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
 
 // src/config/v2/workspace.ts
 import { createHash as createHash2 } from "node:crypto";
-import { access as access2, lstat, readFile as readFile7, rm as rm3, writeFile as writeFile6 } from "node:fs/promises";
-import path13 from "node:path";
-import { glob as glob3 } from "glob";
+import { access as access2, lstat, readFile as readFile9, rm as rm3, writeFile as writeFile6 } from "node:fs/promises";
+import path14 from "node:path";
+import { glob as glob4 } from "glob";
 
 // src/config/v2/link-directory.ts
 import { symlink } from "node:fs/promises";
@@ -8284,18 +8454,18 @@ async function relink(target, link) {
 }
 var GENERATED_PACKAGE_JSON = '{\n  "private": true,\n  "type": "module"\n}\n';
 async function writeGeneratedPackageJson(root) {
-  const file = path13.join(root, "package.json");
-  const current = await readFile7(file, "utf8").catch(() => void 0);
+  const file = path14.join(root, "package.json");
+  const current = await readFile9(file, "utf8").catch(() => void 0);
   if (current !== GENERATED_PACKAGE_JSON)
     await writeFile6(file, GENERATED_PACKAGE_JSON, "utf8");
 }
 async function materializeWorkspace(resolved, prepared) {
-  const root = path13.dirname(prepared.wrapperPath);
+  const root = path14.dirname(prepared.wrapperPath);
   await ensureStateDir(resolved.state);
   await writeGeneratedPackageJson(root);
-  await relink(resolved.configDir, path13.join(root, CONTENT_LINK));
-  const publicDir = resolved.portal && path13.join(resolved.portal.dir, "public");
-  const publicLink = path13.join(root, "public");
+  await relink(resolved.configDir, path14.join(root, CONTENT_LINK));
+  const publicDir = resolved.portal && path14.join(resolved.portal.dir, "public");
+  const publicLink = path14.join(root, "public");
   if (publicDir && await exists2(publicDir)) {
     await relink(publicDir, publicLink);
   } else {
@@ -8304,7 +8474,7 @@ async function materializeWorkspace(resolved, prepared) {
   return root;
 }
 async function configFingerprint(configPath) {
-  const text = await readFile7(configPath, "utf8");
+  const text = await readFile9(configPath, "utf8");
   try {
     const raw = JSON.parse(text);
     if (raw.project) {
@@ -8320,8 +8490,10 @@ async function portalArtifactHash(resolved, manifestText, cliVersion, wrapper =
   const portal = resolved.portal;
   const patterns = [
     ...portal?.docs.content ?? [],
+    // React docs pages and the helpers next to them are imported by the wrapper, so their contents decide the build too.
+    ...portal?.docs.provider === "apitogo" ? tsxPagePatterns(portal.docs.content) : [],
     ...resolved.gateway?.specs ?? [],
-    ...portal ? [portal.theme, path13.join(portal.dir, "public", "**", "*")] : []
+    ...portal ? [portal.theme, path14.join(portal.dir, "public", "**", "*")] : []
   ];
   const positive = patterns.filter((p) => !p.startsWith("!"));
   const ignore2 = patterns.filter((p) => p.startsWith("!")).map((p) => p.slice(1));
@@ -8329,7 +8501,7 @@ async function portalArtifactHash(resolved, manifestText, cliVersion, wrapper =
     ...new Set(
       (await Promise.all(
         positive.map(
-          (pattern) => glob3(pattern.split(path13.sep).join("/"), {
+          (pattern) => glob4(pattern.split(path14.sep).join("/"), {
             absolute: true,
             nodir: true,
             ignore: [...ignore2, "**/node_modules/**"]
@@ -8351,9 +8523,9 @@ async function portalArtifactHash(resolved, manifestText, cliVersion, wrapper =
 `);
   }
   for (const file of files) {
-    hash2.update(`file:${path13.relative(resolved.configDir, file)}
+    hash2.update(`file:${path14.relative(resolved.configDir, file)}
 `);
-    hash2.update(await readFile7(file));
+    hash2.update(await readFile9(file));
   }
   return hash2.digest("hex");
 }
@@ -8369,7 +8541,7 @@ import {
   stat as stat3,
   writeFile as writeFile7
 } from "node:fs/promises";
-import path14 from "node:path";
+import path15 from "node:path";
 
 // src/config/v2/full-server.ts
 var FULL_SERVER_SOURCE = "server";
@@ -8735,7 +8907,7 @@ var exists3 = (target) => access3(target).then(
   () => true,
   () => false
 );
-var rel = (dir, target) => path14.relative(dir, target).split(path14.sep).join("/") || ".";
+var rel = (dir, target) => path15.relative(dir, target).split(path15.sep).join("/") || ".";
 var BLANK_SPEC = (name) => `openapi: 3.1.0
 info:
   title: ${JSON.stringify(name)}
@@ -8834,14 +9006,14 @@ function pair(value, flag, unit) {
   return [Number(match[1]), Number(match[2])];
 }
 function insideProject(dir, requested, what) {
-  const absolute = path14.resolve(dir, requested);
-  const relative = path14.relative(dir, absolute);
-  if (relative === "" || relative.startsWith("..") || path14.isAbsolute(relative)) {
+  const absolute = path15.resolve(dir, requested);
+  const relative = path15.relative(dir, absolute);
+  if (relative === "" || relative.startsWith("..") || path15.isAbsolute(relative)) {
     throw new ServiceEditError(
       `${what} "${requested}" is outside the project directory.`
     );
   }
-  return relative.split(path14.sep).join("/");
+  return relative.split(path15.sep).join("/");
 }
 async function addFile(context, target, content) {
   if (await exists3(target)) context.keep.push(target);
@@ -8893,16 +9065,16 @@ async function buildPortal(context) {
           { value: "starter", label: "A starter page I can edit" },
           { value: "blank", label: "An empty pages folder" }
         ]);
-      const pages = path14.join(resolved.root, "portal", "pages");
+      const pages = path15.join(resolved.root, "portal", "pages");
       if (template === "blank")
-        await addFile(context, path14.join(pages, ".gitkeep"), "");
+        await addFile(context, path15.join(pages, ".gitkeep"), "");
       else if (isFilled(options.template)) {
         await addFile(
           context,
-          path14.join(pages, "introduction.mdx"),
+          path15.join(pages, "introduction.mdx"),
           starterPage(name)
         );
-        const landingFile = path14.join(
+        const landingFile = path15.join(
           resolved.root,
           "portal",
           "landing",
@@ -8920,7 +9092,7 @@ async function buildPortal(context) {
       } else
         await addFile(
           context,
-          path14.join(pages, "index.mdx"),
+          path15.join(pages, "index.mdx"),
           starterPage(name)
         );
     }
@@ -8936,18 +9108,18 @@ async function buildPortal(context) {
   };
 }
 async function createSourceFolder(context, sourcePath, runtime, writeSample) {
-  const folder = path14.join(context.dir, sourcePath);
+  const folder = path15.join(context.dir, sourcePath);
   const entries = await readdir3(folder).catch(() => []);
   if (entries.some((name) => name !== ".gitkeep")) return false;
   if (writeSample && runtime === FULL_SERVER_RUNTIME) {
     for (const [file, content] of Object.entries(
       fullServerFiles(context.resolved.project.name)
     ))
-      await addFile(context, path14.join(folder, file), content);
+      await addFile(context, path15.join(folder, file), content);
     return true;
   }
   if (entries.length === 0)
-    await addFile(context, path14.join(folder, ".gitkeep"), "");
+    await addFile(context, path15.join(folder, ".gitkeep"), "");
   context.notes.push(
     `The folder ${sourcePath}/ is empty: put your backend code there before you deploy.`
   );
@@ -9059,7 +9231,7 @@ async function buildGateway(context) {
     specs = [];
     for (const requested of requestedSpecs) {
       const relative = insideProject(dir, requested, "OpenAPI file");
-      if (!await stat3(path14.join(dir, relative)).then(
+      if (!await stat3(path15.join(dir, relative)).then(
         (s) => s.isFile(),
         () => false
       )) {
@@ -9070,7 +9242,7 @@ async function buildGateway(context) {
       specs.push(relative);
     }
   } else if (createSpec) {
-    const target = path14.join(resolved.apisDir, "openapi.yaml");
+    const target = path15.join(resolved.apisDir, "openapi.yaml");
     await addFile(
       context,
       target,
@@ -9163,35 +9335,22 @@ async function buildPlans(context) {
   const { options, dir, resolved } = context;
   const o = options.plans ?? {};
   const template = o.template ?? (options.template === "blank" ? "none" : isFilled(options.template) ? "starter" : "free");
-  const billing = o.billing ?? (template === "tiered" ? "stripe" : "none");
-  if (template === "tiered" && billing === "none") {
-    throw new ServiceEditError(
-      "The tiered template has paid plans, which need a billing provider.",
-      "Use --billing stripe, or --template free."
-    );
-  }
   const file = o.file ? insideProject(dir, o.file, "Plans file") : void 0;
-  const target = file ? path14.join(dir, file) : resolved.plans?.file ?? path14.join(resolved.root, "plans.json");
+  const target = file ? path15.join(dir, file) : resolved.plans?.file ?? path15.join(resolved.root, "plans.json");
   await addFile(
     context,
     target,
     `${JSON.stringify({ version: 1, plans: PLAN_TEMPLATES[template] }, null, 2)}
 `
   );
-  if (billing === "stripe") {
+  if (PLAN_TEMPLATES[template].some((plan2) => isPaidPlan(plan2))) {
     context.notes.push(
-      "Set the billing key: apitogo secrets set STRIPE_API_KEY"
+      "A plan has a price, so payments go through Stripe: apitogo deploy asks for your Stripe secret key."
     );
   }
   return {
     ...options.disabled ? { enabled: false } : {},
-    ...file ? { file } : {},
-    ...billing === "stripe" ? {
-      billing: {
-        provider: "stripe",
-        apiKey: "secret:STRIPE_API_KEY"
-      }
-    } : { billing: { provider: "none" } }
+    ...file ? { file } : {}
   };
 }
 function reparse(configPath, raw) {
@@ -9210,11 +9369,11 @@ function dependencyProblems(config2, configPath) {
   return checkDependencies(config2, resolveConfigV2(config2, configPath));
 }
 async function planAddService(service, options) {
-  const dir = path14.resolve(options.dir);
+  const dir = path15.resolve(options.dir);
   const { config: config2, resolved } = loadConfigV2(dir);
   if (config2[service] !== void 0) {
     throw new ServiceEditError(
-      `${service} is already in ${path14.basename(resolved.configPath)}.`,
+      `${service} is already in ${path15.basename(resolved.configPath)}.`,
       `Edit the file, or run \`apitogo remove ${service}\` first. Its files are kept.`
     );
   }
@@ -9259,11 +9418,11 @@ async function planAddService(service, options) {
   };
 }
 async function planRemoveService(service, options) {
-  const dir = path14.resolve(options.dir);
+  const dir = path15.resolve(options.dir);
   const { config: config2, resolved } = loadConfigV2(dir);
   if (config2[service] === void 0) {
     throw new ServiceEditError(
-      `${service} is not in ${path14.basename(resolved.configPath)}.`
+      `${service} is not in ${path15.basename(resolved.configPath)}.`
     );
   }
   const { [service]: removed, ...rest } = config2;
@@ -9287,8 +9446,8 @@ async function planRemoveService(service, options) {
   if (service === "gateway" && r.gateway) owned.push(...r.gateway.specs);
   void removed;
   const inside = (target) => {
-    const relative = path14.relative(resolved.root, target);
-    return relative !== "" && !relative.startsWith("..") && !path14.isAbsolute(relative);
+    const relative = path15.relative(resolved.root, target);
+    return relative !== "" && !relative.startsWith("..") && !path15.isAbsolute(relative);
   };
   const deletes = [];
   const left = [];
@@ -9327,7 +9486,7 @@ async function writeConfig(configPath, config2) {
 async function applyServiceEdit(edit) {
   const created = [];
   for (const file of edit.files) {
-    await mkdir5(path14.dirname(file.path), { recursive: true });
+    await mkdir5(path15.dirname(file.path), { recursive: true });
     try {
       await writeFile7(file.path, file.content, { flag: "wx" });
       created.push(file.path);
@@ -9343,7 +9502,7 @@ async function applyServiceEdit(edit) {
 function formatServiceEdit(edit) {
   const verb = edit.action === "add" ? "Adds" : "Removes";
   return [
-    `${verb} the ${edit.service} section in ${path14.basename(edit.configPath)}.`,
+    `${verb} the ${edit.service} section in ${path15.basename(edit.configPath)}.`,
     ...edit.files.length > 0 ? [
       "Will create:",
       ...edit.files.map((file) => `  ${rel(edit.dir, file.path)}`)
@@ -9383,8 +9542,8 @@ async function clearProjectId(dir, projectId) {
 
 // src/config/v2/ledger.ts
 init_invariant();
-import { mkdir as mkdir6, readFile as readFile8, rename as rename4, rm as rm5, writeFile as writeFile8 } from "node:fs/promises";
-import path15 from "node:path";
+import { mkdir as mkdir6, readFile as readFile10, rename as rename4, rm as rm5, writeFile as writeFile8 } from "node:fs/promises";
+import path16 from "node:path";
 var LEDGER_VERSION = 1;
 var LedgerError = class extends ApitogoError {
   constructor(code, message, developerHint) {
@@ -9400,7 +9559,7 @@ var emptyLedger = () => ({
 async function readLedger(state) {
   let text;
   try {
-    text = await readFile8(state.file, "utf8");
+    text = await readFile10(state.file, "utf8");
   } catch (error) {
     if (error.code === "ENOENT")
       return emptyLedger();
@@ -9439,7 +9598,7 @@ function corrupt(file, why) {
   );
 }
 async function writeLedger(state, ledger) {
-  await mkdir6(path15.dirname(state.file), { recursive: true });
+  await mkdir6(path16.dirname(state.file), { recursive: true });
   const temporary = `${state.file}.${process.pid}.tmp`;
   try {
     await writeFile8(temporary, `${JSON.stringify(ledger, null, 2)}
@@ -9535,8 +9694,8 @@ init_invariant();
 
 // src/cli/check/v2.ts
 init_apitogo_config_core();
-import { readFile as readFile15 } from "node:fs/promises";
-import path49 from "node:path";
+import { readFile as readFile17 } from "node:fs/promises";
+import path50 from "node:path";
 
 // src/cli/platform/client/platform-api.ts
 import { basename } from "node:path";
@@ -9649,8 +9808,8 @@ var PlatformApiClient = class {
   constructor(config2) {
     this.config = config2;
   }
-  url(path95) {
-    return `${this.config.apiUrl}${path95.startsWith("/") ? path95 : `/${path95}`}`;
+  url(path97) {
+    return `${this.config.apiUrl}${path97.startsWith("/") ? path97 : `/${path97}`}`;
   }
   headers(extra) {
     return {
@@ -9660,9 +9819,9 @@ var PlatformApiClient = class {
       ...extra
     };
   }
-  async request(method, path95, init3) {
+  async request(method, path97, init3) {
     const response = await fetchWithRetry(
-      this.url(path95),
+      this.url(path97),
       {
         method,
         ...init3,
@@ -10108,15 +10267,15 @@ var PlatformApiClient = class {
       }
     );
   }
-  deleteDevPortalPage(projectId, path95) {
-    const query = new URLSearchParams({ path: path95 });
+  deleteDevPortalPage(projectId, path97) {
+    const query = new URLSearchParams({ path: path97 });
     return this.request(
       "DELETE",
       `/api/v1/projects/${projectId}/dev-portal/pages/files?${query.toString()}`
     );
   }
-  renameDevPortalPage(projectId, path95, newName) {
-    const query = new URLSearchParams({ path: path95 });
+  renameDevPortalPage(projectId, path97, newName) {
+    const query = new URLSearchParams({ path: path97 });
     return this.request(
       "POST",
       `/api/v1/projects/${projectId}/dev-portal/pages/files/rename?${query.toString()}`,
@@ -10232,8 +10391,8 @@ var PlatformApiClient = class {
    * the project-less endpoint is used; `planTier` overrides the tier used for paid-plan checks.
    */
   validateGatewayPlans(plans, options = {}) {
-    const path95 = options.projectId ? `/api/v1/projects/${options.projectId}/gateway/plans/validate` : "/api/v1/gateway/plans/validate";
-    return this.request("POST", path95, {
+    const path97 = options.projectId ? `/api/v1/projects/${options.projectId}/gateway/plans/validate` : "/api/v1/gateway/plans/validate";
+    return this.request("POST", path97, {
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ plans, planTier: options.planTier })
     });
@@ -10358,8 +10517,8 @@ var PlatformApiClient = class {
   }
 };
 async function readFileBytes(filePath) {
-  const { readFile: readFile26 } = await import("node:fs/promises");
-  const buffer = await readFile26(filePath);
+  const { readFile: readFile28 } = await import("node:fs/promises");
+  const buffer = await readFile28(filePath);
   const arrayBuffer = new ArrayBuffer(buffer.byteLength);
   new Uint8Array(arrayBuffer).set(buffer);
   return arrayBuffer;
@@ -10370,8 +10529,8 @@ function isNotFoundError(error) {
 
 // src/cli/platform/credentials-store.ts
 import fs from "node:fs";
-import path16 from "node:path";
-var CREDENTIALS_FILE = path16.join(
+import path17 from "node:path";
+var CREDENTIALS_FILE = path17.join(
   ZUDOKU_XDG_CONFIG_HOME,
   "credentials.json"
 );
@@ -10392,7 +10551,7 @@ function readStoredCredentials() {
   }
 }
 function writeStoredCredentials(creds) {
-  fs.mkdirSync(path16.dirname(CREDENTIALS_FILE), { recursive: true });
+  fs.mkdirSync(path17.dirname(CREDENTIALS_FILE), { recursive: true });
   fs.writeFileSync(CREDENTIALS_FILE, JSON.stringify(creds, null, 2), {
     mode: 384
   });
@@ -10456,16 +10615,16 @@ function resolveProjectId(explicit, config2) {
 import {
   access as access4,
   mkdir as mkdir12,
-  readFile as readFile12,
+  readFile as readFile14,
   rename as rename6,
   rm as rm8,
   writeFile as writeFile15
 } from "node:fs/promises";
-import path48 from "node:path";
+import path49 from "node:path";
 
 // src/vite/build.ts
-import { mkdir as mkdir11, readFile as readFile10, rename as rename5, rm as rm7, writeFile as writeFile13 } from "node:fs/promises";
-import path46 from "node:path";
+import { mkdir as mkdir11, readFile as readFile12, rename as rename5, rm as rm7, writeFile as writeFile13 } from "node:fs/promises";
+import path47 from "node:path";
 import { build as esbuild } from "esbuild";
 import { build as viteBuild, mergeConfig as mergeConfig3 } from "vite";
 
@@ -10601,7 +10760,7 @@ init_invariant();
 init_joinUrl();
 
 // src/vite/config.ts
-import path41 from "node:path";
+import path42 from "node:path";
 import dotenv from "dotenv";
 import colors8 from "picocolors";
 import {
@@ -10612,7 +10771,7 @@ import {
 // package.json
 var package_default = {
   name: "@lukoweb/apitogo",
-  version: "0.2.47",
+  version: "0.2.50",
   type: "module",
   sideEffects: [
     "**/*.css",
@@ -11049,24 +11208,24 @@ async function loadDevPortalViteDefines(rootDir, mode) {
 
 // src/vite/package-root.ts
 init_file_exists();
-import path21 from "node:path";
+import path22 from "node:path";
 var findPackageRoot = async (startDir) => {
   let dir = startDir;
-  while (dir !== path21.dirname(dir)) {
-    if (await fileExists(path21.join(dir, "package.json"))) return dir;
-    dir = path21.dirname(dir);
+  while (dir !== path22.dirname(dir)) {
+    if (await fileExists(path22.join(dir, "package.json"))) return dir;
+    dir = path22.dirname(dir);
   }
 };
 
 // src/vite/pagefind-dev-stub.ts
 import fs2 from "node:fs/promises";
-import path22 from "node:path";
+import path23 from "node:path";
 var NOT_BUILT_YET = 'throw new Error("NOT_BUILT_YET");';
 async function ensurePagefindDevStub(publicDir) {
-  const pagefindPath = path22.join(publicDir, "pagefind/pagefind.js");
+  const pagefindPath = path23.join(publicDir, "pagefind/pagefind.js");
   const exists6 = await fs2.stat(pagefindPath).catch(() => false);
   if (!exists6) {
-    await fs2.mkdir(path22.dirname(pagefindPath), { recursive: true });
+    await fs2.mkdir(path23.dirname(pagefindPath), { recursive: true });
     await fs2.writeFile(pagefindPath, NOT_BUILT_YET);
   }
 }
@@ -11078,7 +11237,7 @@ import react from "@vitejs/plugin-react";
 // src/vite/css/plugin.ts
 init_loader();
 init_plugin_theme();
-import path23 from "node:path";
+import path24 from "node:path";
 import { isCSSRequest as isCSSRequest2 } from "vite";
 
 // src/vite/css/collect.ts
@@ -11113,7 +11272,7 @@ var VIRTUAL_ENTRY = "virtual:ssr-css.css";
 function vitePluginSsrCss(pluginOpts) {
   let server;
   const config2 = getCurrentConfig();
-  const virtualHref = path23.join(
+  const virtualHref = path24.join(
     config2.basePath ?? "",
     `/@id/__x00__${VIRTUAL_ENTRY}?direct`
   );
@@ -11250,7 +11409,7 @@ var plugin_api_keys_default = viteApiKeysPlugin;
 
 // src/vite/plugin-api.ts
 import fs4 from "node:fs/promises";
-import path29 from "node:path";
+import path30 from "node:path";
 import { deepEqual as deepEqual2 } from "fast-equals";
 import { runnerImport as runnerImport3 } from "vite";
 init_package_json();
@@ -11259,7 +11418,7 @@ init_loader();
 // src/config/validators/BuildSchema.ts
 init_file_exists();
 init_loader();
-import path24 from "node:path";
+import path25 from "node:path";
 import { runnerImport as runnerImport2 } from "vite";
 import { z as z13 } from "zod";
 var BuildProcessorSchema = z13.custom((val) => typeof val === "function");
@@ -11288,7 +11447,7 @@ var buildConfigFiles = [
 ];
 async function getBuildConfigFilePath(rootDir) {
   for (const fileName of buildConfigFiles) {
-    const filepath = path24.join(rootDir, fileName);
+    const filepath = path25.join(rootDir, fileName);
     if (await fileExists(filepath)) {
       return filepath;
     }
@@ -11397,14 +11556,14 @@ var flattenAllOf = (schema2) => {
 };
 
 // src/lib/util/traverse.ts
-var traverse = (specification, transform, path95 = []) => {
-  const transformed = transform(specification, path95);
+var traverse = (specification, transform, path97 = []) => {
+  const transformed = transform(specification, path97);
   if (typeof transformed !== "object" || transformed === null) {
     return transformed;
   }
   const result = Array.isArray(transformed) ? [] : {};
   for (const [key, value] of Object.entries(transformed)) {
-    const currentPath = [...path95, key];
+    const currentPath = [...path97, key];
     if (Array.isArray(value)) {
       result[key] = value.map(
         (item, index) => typeof item === "object" && item != null ? traverse(item, transform, [...currentPath, index.toString()]) : item
@@ -11432,9 +11591,9 @@ var resolveLocalRef = (schema2, ref) => {
   if (schemaCache?.has(ref)) {
     return schemaCache.get(ref);
   }
-  const path95 = ref.split("/").slice(1);
+  const path97 = ref.split("/").slice(1);
   let current = schema2;
-  for (const segment of path95) {
+  for (const segment of path97) {
     if (!current || typeof current !== "object") {
       current = null;
     }
@@ -11453,7 +11612,7 @@ var dereference = async (schema2, resolvers = []) => {
   }
   const cloned = structuredClone(schema2);
   const visited = /* @__PURE__ */ new Set();
-  const resolve = async (current, path95) => {
+  const resolve = async (current, path97) => {
     if (isIndexableObject(current)) {
       if (visited.has(current)) {
         return CIRCULAR_REF;
@@ -11461,7 +11620,7 @@ var dereference = async (schema2, resolvers = []) => {
       visited.add(current);
       if (Array.isArray(current)) {
         for (let index = 0; index < current.length; index++) {
-          current[index] = await resolve(current[index], `${path95}/${index}`);
+          current[index] = await resolve(current[index], `${path97}/${index}`);
         }
       } else {
         if ("$ref" in current && typeof current.$ref === "string") {
@@ -11472,13 +11631,13 @@ var dereference = async (schema2, resolvers = []) => {
           for (const resolver of resolvers) {
             const resolved = await resolver($ref);
             if (resolved) {
-              result2 = await resolve(resolved, path95);
+              result2 = await resolve(resolved, path97);
               break;
             }
           }
           if (result2 === void 0) {
             const resolved = await resolveLocalRef(cloned, $ref);
-            result2 = await resolve(resolved, path95);
+            result2 = await resolve(resolved, path97);
           }
           if (hasSiblings) {
             if (result2 === CIRCULAR_REF) {
@@ -11491,7 +11650,7 @@ var dereference = async (schema2, resolvers = []) => {
           return result2;
         }
         for (const key in current) {
-          current[key] = await resolve(current[key], `${path95}/${key}`);
+          current[key] = await resolve(current[key], `${path97}/${key}`);
         }
       }
       visited.delete(current);
@@ -11530,9 +11689,9 @@ var upgradeSchema = (schema2) => {
     }
     return sub;
   });
-  schema2 = traverse(schema2, (sub, path95) => {
+  schema2 = traverse(schema2, (sub, path97) => {
     if (sub.example !== void 0) {
-      if (isSchemaPath(path95 ?? [])) {
+      if (isSchemaPath(path97 ?? [])) {
         sub.examples = [sub.example];
       } else {
         sub.examples = {
@@ -11545,11 +11704,11 @@ var upgradeSchema = (schema2) => {
     }
     return sub;
   });
-  schema2 = traverse(schema2, (schema3, path95) => {
+  schema2 = traverse(schema2, (schema3, path97) => {
     if (schema3.type === "object" && schema3.properties !== void 0) {
-      const parentPath = path95?.slice(0, -1);
+      const parentPath = path97?.slice(0, -1);
       const isMultipart = parentPath?.some((segment, index) => {
-        return segment === "content" && path95?.[index + 1] === "multipart/form-data";
+        return segment === "content" && path97?.[index + 1] === "multipart/form-data";
       });
       if (isMultipart) {
         const entries = Object.entries(schema3.properties);
@@ -11563,8 +11722,8 @@ var upgradeSchema = (schema2) => {
     }
     return schema3;
   });
-  schema2 = traverse(schema2, (schema3, path95) => {
-    if (path95?.includes("content") && path95.includes("application/octet-stream")) {
+  schema2 = traverse(schema2, (schema3, path97) => {
+    if (path97?.includes("content") && path97.includes("application/octet-stream")) {
       return {};
     }
     if (schema3.type === "string" && schema3.format === "binary") {
@@ -11590,11 +11749,11 @@ var upgradeSchema = (schema2) => {
     }
     return sub;
   });
-  schema2 = traverse(schema2, (schema3, path95) => {
+  schema2 = traverse(schema2, (schema3, path97) => {
     if (schema3.type === "string" && schema3.format === "byte") {
-      const parentPath = path95?.slice(0, -1);
+      const parentPath = path97?.slice(0, -1);
       const contentMediaType = parentPath?.find(
-        (_, index) => path95?.[index - 1] === "content"
+        (_, index) => path97?.[index - 1] === "content"
       );
       return {
         type: "string",
@@ -11606,7 +11765,7 @@ var upgradeSchema = (schema2) => {
   });
   return schema2;
 };
-function isSchemaPath(path95) {
+function isSchemaPath(path97) {
   const schemaLocations = [
     ["components", "schemas"],
     "properties",
@@ -11619,10 +11778,10 @@ function isSchemaPath(path95) {
   ];
   return schemaLocations.some((location) => {
     if (Array.isArray(location)) {
-      return location.every((segment, index) => path95[index] === segment);
+      return location.every((segment, index) => path97[index] === segment);
     }
-    return path95.includes(location);
-  }) || path95.includes("schema") || path95.some((segment) => segment.endsWith("Schema"));
+    return path97.includes(location);
+  }) || path97.includes("schema") || path97.some((segment) => segment.endsWith("Schema"));
 }
 
 // src/lib/oas/parser/index.ts
@@ -11704,13 +11863,13 @@ var OPENAPI_PROPS = /* @__PURE__ */ new Set([
   "anyOf",
   "oneOf"
 ]);
-var handleCircularRefs = (obj, currentPath = /* @__PURE__ */ new WeakSet(), refs = /* @__PURE__ */ new WeakMap(), path95 = [], currentRefPaths = /* @__PURE__ */ new Set()) => {
+var handleCircularRefs = (obj, currentPath = /* @__PURE__ */ new WeakSet(), refs = /* @__PURE__ */ new WeakMap(), path97 = [], currentRefPaths = /* @__PURE__ */ new Set()) => {
   if (obj === null || typeof obj !== "object") return obj;
   const refPath = obj.__$ref;
   const isCircular = currentPath.has(obj) || typeof refPath === "string" && currentRefPaths.has(refPath);
   if (isCircular) {
     if (typeof refPath === "string") return SCHEMA_REF_PREFIX + refPath;
-    const circularProp = path95.find((p) => !OPENAPI_PROPS.has(p)) || path95[0];
+    const circularProp = path97.find((p) => !OPENAPI_PROPS.has(p)) || path97[0];
     return [CIRCULAR_REF, circularProp].filter(Boolean).join(":");
   }
   if (refs.has(obj)) return refs.get(obj);
@@ -11720,7 +11879,7 @@ var handleCircularRefs = (obj, currentPath = /* @__PURE__ */ new WeakSet(), refs
     value,
     currentPath,
     refs,
-    [...path95, key],
+    [...path97, key],
     currentRefPaths
   );
   const result = Array.isArray(obj) ? obj.map((item, i) => recurse(item, i.toString())) : Object.fromEntries(
@@ -11755,7 +11914,7 @@ var resolveExtensions = (obj) => Object.fromEntries(
 var getAllTags = (schema2) => {
   const rootTags = schema2.tags ?? [];
   const operations = Object.values(schema2.paths ?? {}).flatMap(
-    (path95) => HttpMethods.map((k) => path95?.[k]).filter((op) => op != null)
+    (path97) => HttpMethods.map((k) => path97?.[k]).filter((op) => op != null)
   );
   const operationTags = new Set(operations.flatMap((op) => op.tags ?? []));
   const hasUntaggedOperations = operations.some(
@@ -11810,7 +11969,7 @@ var getAllSlugs = (ops, schemaTags = []) => {
 var getOperationSlugKey = (op) => [op.path, op.method, op.operationId, op.summary].filter(Boolean).join("-");
 var getAllOperations = (paths) => {
   const operations = Object.entries(paths ?? {}).flatMap(
-    ([path95, value]) => HttpMethods.flatMap((method) => {
+    ([path97, value]) => HttpMethods.flatMap((method) => {
       if (!value?.[method]) return [];
       const operation = value[method];
       const pathParameters = value.parameters ?? [];
@@ -11830,7 +11989,7 @@ var getAllOperations = (paths) => {
       return {
         ...operation,
         method,
-        path: path95,
+        path: path97,
         parameters,
         servers,
         tags: operation.tags ?? []
@@ -12188,8 +12347,8 @@ var Schema = builder.objectRef("Schema").implement({
     }),
     paths: t.field({
       type: [PathItem],
-      resolve: (root) => Object.entries(root.paths ?? {}).map(([path95, value]) => ({
-        path: path95,
+      resolve: (root) => Object.entries(root.paths ?? {}).map(([path97, value]) => ({
+        path: path97,
         // biome-ignore lint/style/noNonNullAssertion: value is guaranteed to be defined
         methods: Object.keys(value)
       }))
@@ -12302,7 +12461,7 @@ var ensureArray = (value) => Array.isArray(value) ? value : [value];
 
 // src/vite/api/SchemaManager.ts
 import fs3 from "node:fs/promises";
-import path25 from "node:path";
+import path26 from "node:path";
 import {
   $RefParser as $RefParser2
 } from "@apidevtools/json-schema-ref-parser";
@@ -12354,7 +12513,7 @@ init_joinUrl();
 
 // src/vite/api/schema-codegen.ts
 var unescapeJsonPointer = (uri) => decodeURIComponent(uri.replace(/~1/g, "/").replace(/~0/g, "~"));
-var getSegmentsFromPath = (path95) => path95.split("/").slice(1).map(unescapeJsonPointer);
+var getSegmentsFromPath = (path97) => path97.split("/").slice(1).map(unescapeJsonPointer);
 var createLocalRefMap = (obj) => {
   const refMap = /* @__PURE__ */ new Map();
   const siblingsMap = /* @__PURE__ */ new Map();
@@ -12385,16 +12544,16 @@ var replaceMarkers = (code, mergedRefs) => code.replace(/"__refMap:(.*?)"/g, '__
   /"__refMap\+Siblings:(.*?)"/g,
   (_, key) => mergedRefs.get(key) ?? `__refMap["${key}"]`
 );
-var lookup = (schema2, path95, filePath) => {
-  const parts = getSegmentsFromPath(path95);
+var lookup = (schema2, path97, filePath) => {
+  const parts = getSegmentsFromPath(path97);
   let val = schema2;
   for (const part of parts) {
     while (val.$ref?.startsWith("#/")) {
-      val = val.$ref === path95 ? val : lookup(schema2, val.$ref, filePath);
+      val = val.$ref === path97 ? val : lookup(schema2, val.$ref, filePath);
     }
     if (val[part] === void 0) {
       throw new Error(
-        `Error in ${filePath ?? "code generation"}: Could not find path segment ${part} in path: ${path95}`
+        `Error in ${filePath ?? "code generation"}: Could not find path segment ${part} in path: ${path97}`
       );
     }
     val = val[part];
@@ -12492,18 +12651,18 @@ var SchemaManager = class {
     ];
   }
   getPathForFile = (input5, params) => {
-    const filePath = path25.resolve(this.config.__meta.rootDir, input5);
+    const filePath = path26.resolve(this.config.__meta.rootDir, input5);
     const apis = ensureArray(this.config.apis ?? []);
     for (const apiConfig of apis) {
       if (!apiConfig || apiConfig.type !== "file" || !apiConfig.path) continue;
       const match = normalizeInputs(apiConfig.input).some(
-        (i) => path25.resolve(this.config.__meta.rootDir, i.input) === filePath && deepEqual(i.params, params)
+        (i) => path26.resolve(this.config.__meta.rootDir, i.input) === filePath && deepEqual(i.params, params)
       );
       if (match) return apiConfig.path;
     }
   };
   processSchema = async (input5) => {
-    const filePath = path25.resolve(this.config.__meta.rootDir, input5.input);
+    const filePath = path26.resolve(this.config.__meta.rootDir, input5.input);
     const params = input5.params;
     const configuredPath = this.getPathForFile(input5.input, params);
     if (!configuredPath) {
@@ -12539,9 +12698,9 @@ var SchemaManager = class {
     const processedTime = Date.now();
     const code = generateCode(processedSchema, filePath);
     const prefixPath = slugify(configuredPath);
-    const processedFilePath = path25.posix.join(
+    const processedFilePath = path26.posix.join(
       this.storeDir,
-      `${prefixPath}-${path25.basename(filePath)}${paramsSuffix(params)}.js`
+      `${prefixPath}-${path26.basename(filePath)}${paramsSuffix(params)}.js`
     );
     const importKey = processedFilePath;
     await fs3.writeFile(processedFilePath, code);
@@ -12590,7 +12749,7 @@ var SchemaManager = class {
   };
   getAllTrackedFiles = () => Array.from(this.referencedBy.keys());
   getFilesToReprocess = (changedFile) => {
-    const resolvedPath = path25.resolve(this.config.__meta.rootDir, changedFile);
+    const resolvedPath = path26.resolve(this.config.__meta.rootDir, changedFile);
     const referencedBy = this.referencedBy.get(resolvedPath);
     if (!referencedBy) return [];
     const filesToProcess = referencedBy.size === 0 ? [resolvedPath] : Array.from(referencedBy);
@@ -12619,7 +12778,7 @@ var SchemaManager = class {
         version: "",
         path: input5.path ?? "",
         label: input5.label,
-        inputPath: path25.resolve(this.config.__meta.rootDir, input5.input),
+        inputPath: path26.resolve(this.config.__meta.rootDir, input5.input),
         params: input5.params,
         importKey: "",
         downloadUrl: "",
@@ -12639,8 +12798,8 @@ var SchemaManager = class {
       }
     }
   };
-  getLatestSchema = (path95) => this.processedSchemas[path95]?.at(0);
-  getSchemasForPath = (path95) => this.processedSchemas[path95];
+  getLatestSchema = (path97) => this.processedSchemas[path97]?.at(0);
+  getSchemasForPath = (path97) => this.processedSchemas[path97];
   getSchemaImports = () => Object.values(this.processedSchemas).flat().filter((s) => s.importKey);
   getUrlToFilePathMap = () => {
     const map = /* @__PURE__ */ new Map();
@@ -12662,7 +12821,7 @@ var SchemaManager = class {
   };
   createSchemaPath = (inputPath, versionPath, apiPath, params) => {
     const suffix = paramsSuffix(params);
-    const extension = suffix ? ".json" : path25.extname(inputPath);
+    const extension = suffix ? ".json" : path26.extname(inputPath);
     return joinUrl(
       this.config.basePath,
       apiPath,
@@ -12685,7 +12844,7 @@ var SchemaManager = class {
 // src/vite/plugin-config-reload.ts
 init_logger();
 init_loader();
-import path28 from "node:path";
+import path29 from "node:path";
 import colors7 from "picocolors";
 
 // src/vite/plugin-navigation.ts
@@ -12695,8 +12854,8 @@ import { stringify as stringify3 } from "javascript-stringify";
 import { isElement } from "react-is";
 
 // src/config/validators/NavigationSchema.ts
-import path26 from "node:path";
-import { glob as glob4 } from "glob";
+import path27 from "node:path";
+import { glob as glob5 } from "glob";
 import { fromMarkdown } from "mdast-util-from-markdown";
 import { mdxFromMarkdown } from "mdast-util-mdx";
 import { mdxjs } from "micromark-extension-mdxjs";
@@ -12730,7 +12889,7 @@ var extractRichH1 = (content) => {
   }
 };
 var isNavigationItem = (item) => item !== void 0;
-var toPosixPath = (filePath) => filePath.split(path26.win32.sep).join(path26.posix.sep);
+var toPosixPath = (filePath) => filePath.split(path27.win32.sep).join(path27.posix.sep);
 var NavigationResolver = class {
   rootDir;
   globPatterns;
@@ -12744,7 +12903,7 @@ var NavigationResolver = class {
   }
   async initialize() {
     if (this.globFiles.length > 0) return;
-    this.globFiles = await glob4(this.globPatterns, {
+    this.globFiles = await glob5(this.globPatterns, {
       root: this.rootDir,
       ignore: ["**/node_modules/**", "**/.git/**", "**/dist/**"]
     }).then((files) => files.map(toPosixPath));
@@ -12863,13 +13022,13 @@ init_invariant();
 
 // src/vite/debug.ts
 import { mkdir as mkdir7, writeFile as writeFile9 } from "node:fs/promises";
-import path27 from "node:path";
+import path28 from "node:path";
 async function writePluginDebugCode(rootDir, pluginName, code, extension = "js") {
   if (process.env.ZUDOKU_BUILD_DEBUG) {
-    const debugDir = path27.join(rootDir, "dist", "debug");
+    const debugDir = path28.join(rootDir, "dist", "debug");
     await mkdir7(debugDir, { recursive: true });
     await writeFile9(
-      path27.join(debugDir, `${pluginName}.${extension}`),
+      path28.join(debugDir, `${pluginName}.${extension}`),
       typeof code === "string" ? code : code.join("\n")
     );
   }
@@ -12978,7 +13137,7 @@ var viteConfigReloadPlugin = () => ({
       reload(server);
       logger.info(
         colors7.blue(
-          `Config ${path28.basename(currentConfig.__meta.configPath)} changed. Reloading...`
+          `Config ${path29.basename(currentConfig.__meta.configPath)} changed. Reloading...`
         ),
         { timestamp: true }
       );
@@ -12992,11 +13151,11 @@ var viteApiPlugin = async () => {
   const resolvedVirtualModuleId5 = `\0${virtualModuleId4}`;
   const initialConfig = getCurrentConfig();
   const zuploProcessors = ZuploEnv.isZuplo ? await runnerImport3(
-    path29.resolve(getZudokuRootDir(), "src/zuplo/with-zuplo-processors.ts")
+    path30.resolve(getZudokuRootDir(), "src/zuplo/with-zuplo-processors.ts")
   ).then((m) => m.module.default(initialConfig.__meta.rootDir)) : [];
   const buildConfig = await getBuildConfig();
   const buildProcessors = buildConfig?.processors ?? [];
-  const tmpStoreDir = path29.posix.join(
+  const tmpStoreDir = path30.posix.join(
     initialConfig.__meta.rootDir,
     "node_modules/.apitogo/processed"
   );
@@ -13028,7 +13187,7 @@ var viteApiPlugin = async () => {
         const inputPath = pathMap.get(req.url);
         if (!inputPath) return next();
         const content = await fs4.readFile(inputPath, "utf-8");
-        const mimeType = path29.extname(inputPath).toLowerCase() === ".json" ? "application/json" : "application/x-yaml";
+        const mimeType = path30.extname(inputPath).toLowerCase() === ".json" ? "application/json" : "application/x-yaml";
         res.setHeader("Content-Type", `${mimeType}; charset=utf-8`);
         return res.end(content);
       });
@@ -13216,8 +13375,8 @@ var viteApiPlugin = async () => {
       if (process.env.NODE_ENV !== "production") return;
       for (const [urlPath, inputPath] of pathMap) {
         const content = await fs4.readFile(inputPath, "utf-8");
-        const outputPath = path29.join(config2.__meta.rootDir, "dist", urlPath);
-        await fs4.mkdir(path29.dirname(outputPath), { recursive: true });
+        const outputPath = path30.join(config2.__meta.rootDir, "dist", urlPath);
+        await fs4.mkdir(path30.dirname(outputPath), { recursive: true });
         await fs4.writeFile(outputPath, content, "utf-8");
       }
     }
@@ -13260,7 +13419,7 @@ var plugin_auth_default = viteAuthPlugin;
 
 // src/vite/plugin-component.ts
 init_loader();
-import path30 from "node:path";
+import path31 from "node:path";
 var viteAliasPlugin = () => {
   return {
     name: "zudoku-component-plugin",
@@ -13288,7 +13447,7 @@ var viteAliasPlugin = () => {
       ];
       const aliases = replacements.map(([find, replacement]) => ({
         find,
-        replacement: path30.posix.join(config2.__meta.moduleDir, replacement)
+        replacement: path31.posix.join(config2.__meta.moduleDir, replacement)
       }));
       return config2.__meta.mode === "internal" || config2.__meta.mode === "standalone" ? { resolve: { alias: aliases } } : void 0;
     }
@@ -13299,11 +13458,11 @@ var plugin_component_default = viteAliasPlugin;
 // src/vite/plugin-config.ts
 init_package_json();
 init_loader();
-import path31 from "node:path";
+import path32 from "node:path";
 import { normalizePath } from "vite";
 var virtualModuleId3 = "virtual:zudoku-config";
 var resolvedVirtualModuleId3 = `\0${virtualModuleId3}`;
-var browserConfigLoaderPath = path31.join(
+var browserConfigLoaderPath = path32.join(
   getZudokuRootDir(),
   "src/config/apitogo-config-loader.browser.ts"
 );
@@ -13437,7 +13596,7 @@ var plugin_custom_pages_default = viteCustomPagesPlugin;
 
 // src/vite/plugin-doc-metadata.ts
 init_loader();
-import { glob as glob5 } from "glob";
+import { glob as glob6 } from "glob";
 var serializeMetadata = async (filePath) => {
   const fm = await readFrontmatter(filePath);
   const h1 = fm.content.match(/^#\s+(.*)$/m)?.[1];
@@ -13448,7 +13607,7 @@ var viteDocMetadataPlugin = () => ({
   name: "zudoku-doc-metadata-plugin",
   configureServer: async (server) => {
     const config2 = getCurrentConfig();
-    const files = await glob5("**/*.{md,mdx}", {
+    const files = await glob6("**/*.{md,mdx}", {
       cwd: config2.__meta.rootDir,
       ignore: ["node_modules", "dist"],
       absolute: true
@@ -13474,9 +13633,9 @@ var viteDocMetadataPlugin = () => ({
 
 // src/vite/plugin-docs.ts
 init_loader();
-import path32 from "node:path";
-import { glob as glob6 } from "glob";
-import globParent2 from "glob-parent";
+import path33 from "node:path";
+import { glob as glob7 } from "glob";
+import globParent3 from "glob-parent";
 init_ZudokuConfig();
 
 // src/lib/components/navigation/utils.ts
@@ -13531,19 +13690,19 @@ var globMarkdownFiles = async (config2, options = { absolute: false }) => {
   const docsConfig = DocsConfigSchema.parse(config2.docs ?? {});
   const fileMapping = {};
   for (const globPattern of docsConfig.files) {
-    const globbedFiles = await glob6(globPattern, {
+    const globbedFiles = await glob7(globPattern, {
       root: config2.__meta.rootDir,
       ignore: ["**/node_modules/**", "**/dist/**", "**/.git/**"],
       // Always glob with relative paths to avoid issues on different OS
       absolute: false,
       posix: true
     });
-    const parent = globParent2(globPattern).replace(/^\.?\//, "");
+    const parent = globParent3(globPattern).replace(/^\.?\//, "");
     let draftFiles = /* @__PURE__ */ new Set();
     if (process.env.NODE_ENV !== "development") {
       const draftStatuses = await Promise.all(
         globbedFiles.map(async (file) => {
-          const absolutePath = path32.resolve(config2.__meta.rootDir, file);
+          const absolutePath = path33.resolve(config2.__meta.rootDir, file);
           const { data } = await readFrontmatter(absolutePath);
           return { file, isDraft: data.draft === true };
         })
@@ -13556,9 +13715,9 @@ var globMarkdownFiles = async (config2, options = { absolute: false }) => {
       if (draftFiles.has(file)) {
         continue;
       }
-      const relativePath = path32.posix.relative(parent, file);
+      const relativePath = path33.posix.relative(parent, file);
       const routePath = ensureLeadingSlash(relativePath.replace(/\.mdx?$/, ""));
-      const filePath = options.absolute ? path32.resolve(config2.__meta.rootDir, file) : file;
+      const filePath = options.absolute ? path33.resolve(config2.__meta.rootDir, file) : file;
       fileMapping[routePath] = filePath;
     }
   }
@@ -13622,7 +13781,7 @@ var viteDocsPlugin = () => {
       const globbedDocuments = {};
       for (const [routePath, file] of Object.entries(fileMapping)) {
         const importPath = ensureLeadingSlash(
-          path32.posix.join(globImportBasePath, file)
+          path33.posix.join(globImportBasePath, file)
         );
         globbedDocuments[routePath] = importPath;
       }
@@ -13648,7 +13807,7 @@ var plugin_docs_default = viteDocsPlugin;
 // src/vite/plugin-local-manifest.ts
 init_apitogo_config_loader();
 init_local_manifest();
-import path33 from "node:path";
+import path34 from "node:path";
 var APITOGO_LOCAL_MANIFEST_VIRTUAL_ID = "virtual:apitogo-local-manifest";
 var resolvedVirtualModuleId4 = `\0${APITOGO_LOCAL_MANIFEST_VIRTUAL_ID}`;
 var viteLocalManifestPlugin = () => {
@@ -13698,8 +13857,8 @@ var viteLocalManifestPlugin = () => {
         server.watcher.add(watchPath);
       }
       server.watcher.on("change", async (changedPath) => {
-        const resolvedChanged = path33.resolve(changedPath);
-        if (!watchPaths.some((p) => path33.resolve(p) === resolvedChanged)) {
+        const resolvedChanged = path34.resolve(changedPath);
+        if (!watchPaths.some((p) => path34.resolve(p) === resolvedChanged)) {
           return;
         }
         const module = server.moduleGraph.getModuleById(
@@ -13726,7 +13885,7 @@ init_loader();
 init_ProtectedRoutesSchema();
 init_joinUrl();
 import { mkdir as mkdir8, writeFile as writeFile10 } from "node:fs/promises";
-import path34 from "node:path";
+import path35 from "node:path";
 import { matchPath } from "react-router";
 var processMarkdownFile = async (filePath) => {
   const { content: markdownContent, data: frontmatter } = await readFrontmatter(filePath);
@@ -13814,7 +13973,7 @@ var viteMarkdownExportPlugin = () => {
       if (process.env.NODE_ENV !== "production" || Object.keys(markdownFiles).length === 0 || !needsMdFiles) {
         return;
       }
-      const distDir = path34.join(
+      const distDir = path35.join(
         config2.__meta.rootDir,
         "dist",
         config2.basePath ?? ""
@@ -13835,15 +13994,15 @@ var viteMarkdownExportPlugin = () => {
             content: finalMarkdown
           });
           const segments = routePath === "/" ? ["index"] : routePath.split("/").filter(Boolean);
-          const outputPath = `${path34.join(distDir, ...segments)}.md`;
-          await mkdir8(path34.dirname(outputPath), { recursive: true });
+          const outputPath = `${path35.join(distDir, ...segments)}.md`;
+          await mkdir8(path35.dirname(outputPath), { recursive: true });
           await writeFile10(outputPath, finalMarkdown, "utf-8");
         } catch (error) {
           console.warn(`Failed to export markdown for ${routePath}:`, error);
         }
       }
       if (config2.docs?.llms?.llmsTxt || config2.docs?.llms?.llmsTxtFull) {
-        const markdownInfoPath = path34.join(
+        const markdownInfoPath = path35.join(
           config2.__meta.rootDir,
           "node_modules/.apitogo/markdown-info.json"
         );
@@ -13995,9 +14154,9 @@ var remarkCodeTabs = () => (tree) => {
 };
 
 // src/vite/mdx/remark-inject-filepath.ts
-import path35 from "node:path";
+import path36 from "node:path";
 var remarkInjectFilepath = (rootDir) => (tree, vfile) => {
-  const relativePath = path35.relative(rootDir, vfile.path).split(path35.sep).join(path35.posix.sep);
+  const relativePath = path36.relative(rootDir, vfile.path).split(path36.sep).join(path36.posix.sep);
   tree.children.unshift(exportMdxjsConst("__filepath", relativePath));
 };
 
@@ -14084,18 +14243,18 @@ var remarkLastModified = () => {
 };
 
 // src/vite/mdx/remark-link-rewrite.ts
-import path36 from "node:path";
+import path37 from "node:path";
 import { visit as visit5 } from "unist-util-visit";
 var remarkLinkRewrite = (basePath = "") => (tree) => {
   visit5(tree, "link", (node) => {
     if (!node.url) return;
     if (node.url.startsWith("http") || node.url.startsWith("mailto:")) return;
     node.url = node.url.replace(/\\/g, "/");
-    const base = path36.posix.join(basePath);
+    const base = path37.posix.join(basePath);
     if (basePath && node.url.startsWith(base)) {
       node.url = node.url.slice(base.length);
     } else if (!node.url.startsWith("/") && !node.url.startsWith("#")) {
-      node.url = path36.posix.join("..", node.url);
+      node.url = path37.posix.join("..", node.url);
     }
     node.url = node.url.replace(/\.mdx?(#.*)?$/, "$1");
   });
@@ -14315,14 +14474,14 @@ var plugin_mdx_default = viteMdxPlugin;
 
 // src/vite/plugin-modules.ts
 init_loader();
-import path37 from "node:path";
+import path38 from "node:path";
 import { normalizePath as normalizePath2 } from "vite";
-var getLandingModuleImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(path37.join(moduleDir, "../module-landing/src/index.tsx")) : "@lukoweb/apitogo-module-landing";
-var getUserPanelModuleImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(path37.join(moduleDir, "../module-user-panel/src/index.tsx")) : "@lukoweb/apitogo-module-user-panel";
+var getLandingModuleImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(path38.join(moduleDir, "../module-landing/src/index.tsx")) : "@lukoweb/apitogo-module-landing";
+var getUserPanelModuleImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(path38.join(moduleDir, "../module-user-panel/src/index.tsx")) : "@lukoweb/apitogo-module-user-panel";
 var getBillingPluginImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(
-  path37.join(moduleDir, "../plugin-dev-portal-billing/src/index.ts")
+  path38.join(moduleDir, "../plugin-dev-portal-billing/src/index.ts")
 ) : "@lukoweb/apitogo-plugin-dev-portal-billing";
-var resolveProjectPageImport = (rootDir, pagePath) => normalizePath2(path37.resolve(rootDir, pagePath));
+var resolveProjectPageImport = (rootDir, pagePath) => normalizePath2(path38.resolve(rootDir, pagePath));
 var viteModulesPlugin = () => {
   const virtualModuleId4 = "virtual:zudoku-modules-plugin";
   const resolvedVirtualModuleId5 = `\0${virtualModuleId4}`;
@@ -14464,17 +14623,17 @@ var plugin_modules_default = viteModulesPlugin;
 
 // src/vite/plugin-offroot-resolve.ts
 init_loader();
-import path38 from "node:path";
+import path39 from "node:path";
 function stripQuery(id) {
   const query = id.indexOf("?");
   return query === -1 ? id : id.slice(0, query);
 }
 function isInside(parent, child) {
-  const relative = path38.relative(path38.resolve(parent), path38.resolve(child));
-  return relative === "" || !relative.startsWith("..") && !path38.isAbsolute(relative);
+  const relative = path39.relative(path39.resolve(parent), path39.resolve(child));
+  return relative === "" || !relative.startsWith("..") && !path39.isAbsolute(relative);
 }
 function isBareSpecifier(source) {
-  return !source.startsWith("\0") && !source.startsWith(".") && !source.startsWith("/") && !path38.isAbsolute(source);
+  return !source.startsWith("\0") && !source.startsWith(".") && !source.startsWith("/") && !path39.isAbsolute(source);
 }
 function isInsideNodeModules(filePath) {
   return filePath.split(/[\\/]/).includes("node_modules");
@@ -14498,7 +14657,7 @@ function viteOffrootResolvePlugin() {
       if (!shouldResolveFromSiteRoot(source, importer, rootDir)) {
         return;
       }
-      return this.resolve(source, path38.join(rootDir, "package.json"), {
+      return this.resolve(source, path39.join(rootDir, "package.json"), {
         ...options,
         skipSelf: true
       });
@@ -14508,7 +14667,7 @@ function viteOffrootResolvePlugin() {
 
 // src/vite/plugin-search.ts
 init_loader();
-import path39 from "node:path";
+import path40 from "node:path";
 var viteSearchPlugin = () => {
   const virtualModuleId4 = "virtual:zudoku-search-plugin";
   const resolvedVirtualModuleId5 = `\0${virtualModuleId4}`;
@@ -14526,7 +14685,7 @@ var viteSearchPlugin = () => {
         return resolvedVirtualModuleId5;
       }
       if (id === "/pagefind/pagefind.js" && resolvedViteConfig?.publicDir) {
-        return path39.join(resolvedViteConfig.publicDir, "pagefind/pagefind.js");
+        return path40.join(resolvedViteConfig.publicDir, "pagefind/pagefind.js");
       }
     },
     async load(id) {
@@ -14667,27 +14826,27 @@ function vitePlugin() {
 
 // src/vite/watch-ignore.ts
 import { lstatSync, realpathSync } from "node:fs";
-import path40 from "node:path";
+import path41 from "node:path";
 var STATE_INSIDE_CONTENT = /[\\/]content[\\/](?:\.apitogo|apitogo[\\/]\.state)(?:[\\/]|$)/;
 var within = (base, file) => {
-  const resolvedBase = path40.resolve(base);
-  const resolvedFile = path40.resolve(file);
-  return resolvedFile === resolvedBase || resolvedFile.startsWith(resolvedBase + path40.sep);
+  const resolvedBase = path41.resolve(base);
+  const resolvedFile = path41.resolve(file);
+  return resolvedFile === resolvedBase || resolvedFile.startsWith(resolvedBase + path41.sep);
 };
 var unique = (paths) => [...new Set(paths)];
 function isWorkspace(root) {
   try {
-    return path40.basename(root) === "generated" && lstatSync(path40.join(root, "content")).isSymbolicLink();
+    return path41.basename(root) === "generated" && lstatSync(path41.join(root, "content")).isSymbolicLink();
   } catch {
     return false;
   }
 }
 function tenantDir(root) {
-  return isWorkspace(root) ? realpathSync(path40.join(root, "content")) : void 0;
+  return isWorkspace(root) ? realpathSync(path41.join(root, "content")) : void 0;
 }
 function stateIgnore(root) {
   if (!isWorkspace(root)) return void 0;
-  const state = path40.dirname(root);
+  const state = path41.dirname(root);
   const states = unique([state, realpathSync(state)]);
   const roots = unique([root, realpathSync(root)]);
   return (file) => {
@@ -14698,17 +14857,17 @@ function stateIgnore(root) {
 }
 function devServerAllow(root, moduleDir) {
   const tenant = tenantDir(root);
-  return [root, path40.dirname(root), moduleDir, ...tenant ? [tenant] : []];
+  return [root, path41.dirname(root), moduleDir, ...tenant ? [tenant] : []];
 }
 
 // src/vite/config.ts
 var resolveMergedPublicDir = (rootDir, merged) => {
   if (merged.publicDir === false) return void 0;
   const rel2 = typeof merged.publicDir === "string" ? merged.publicDir : "public";
-  return path41.resolve(rootDir, rel2);
+  return path42.resolve(rootDir, rel2);
 };
-var getAppClientEntryPath = () => path41.posix.join(getZudokuRootDir(), "src/app/entry.client.tsx");
-var getAppServerEntryPath = () => path41.posix.join(getZudokuRootDir(), "src/app/entry.server.tsx");
+var getAppClientEntryPath = () => path42.posix.join(getZudokuRootDir(), "src/app/entry.client.tsx");
+var getAppServerEntryPath = () => path42.posix.join(getZudokuRootDir(), "src/app/entry.server.tsx");
 var hasLoggedCdnInfo = false;
 var MEDIA_REGEX = /\.(a?png|jpe?g|gif|bmp|svg|webp|tiff|ico|webm|ogg|mp3|wav|m4a|avif|mp4)/i;
 var defineEnvVars = (vars) => Object.fromEntries(
@@ -14739,7 +14898,7 @@ async function getViteConfig(dir, configEnv) {
   const ignoreState = stateIgnore(dir);
   if (ZuploEnv.isZuplo) {
     dotenv.config({
-      path: path41.resolve(config2.__meta.rootDir, "../.env.zuplo"),
+      path: path42.resolve(config2.__meta.rootDir, "../.env.zuplo"),
       quiet: true
     });
   }
@@ -14802,8 +14961,8 @@ async function getViteConfig(dir, configEnv) {
       ssr: configEnv.isSsrBuild,
       sourcemap: true,
       target: "es2022",
-      outDir: path41.resolve(
-        path41.join(
+      outDir: path42.resolve(
+        path42.join(
           dir,
           "dist",
           config2.basePath ?? "",
@@ -14822,7 +14981,7 @@ async function getViteConfig(dir, configEnv) {
     },
     experimental: {
       renderBuiltUrl(filename) {
-        if (cdnUrl?.base && [".js", ".css"].includes(path41.extname(filename))) {
+        if (cdnUrl?.base && [".js", ".css"].includes(path42.extname(filename))) {
           return joinUrl(cdnUrl.base, filename);
         }
         if (cdnUrl?.media && MEDIA_REGEX.test(filename)) {
@@ -14835,7 +14994,7 @@ async function getViteConfig(dir, configEnv) {
       esbuildOptions: {
         target: "es2022"
       },
-      entries: [path41.posix.join(getZudokuRootDir(), "src/{app,lib}/**")],
+      entries: [path42.posix.join(getZudokuRootDir(), "src/{app,lib}/**")],
       exclude: [
         "@lukoweb/apitogo",
         "@lukoweb/apitogo-plugin-dev-portal-billing"
@@ -14939,7 +15098,7 @@ init_package_json();
 init_joinUrl();
 import assert from "node:assert";
 import { cp, mkdir as mkdir9, writeFile as writeFile11 } from "node:fs/promises";
-import path42 from "node:path";
+import path43 from "node:path";
 var pkgJson = getZudokuPackageJson();
 function generateOutput({
   config: config2,
@@ -14996,9 +15155,9 @@ async function writeOutput(dir, {
   rewrites
 }) {
   const output4 = generateOutput({ config: config2, redirects, rewrites });
-  const outputDir = process.env.VERCEL ? path42.join(dir, ".vercel/output") : path42.join(dir, "dist/.output");
+  const outputDir = process.env.VERCEL ? path43.join(dir, ".vercel/output") : path43.join(dir, "dist/.output");
   await mkdir9(outputDir, { recursive: true });
-  const outputFile = path42.join(outputDir, "config.json");
+  const outputFile = path43.join(outputDir, "config.json");
   await writeFile11(outputFile, JSON.stringify(output4, null, 2), "utf-8");
   if (process.env.VERCEL) {
     console.log("Wrote Vercel output to", outputDir);
@@ -15008,9 +15167,9 @@ async function writeOutput(dir, {
 // src/vite/prerender/prerender.ts
 init_logger();
 init_file_exists();
-import { readFile as readFile9, rm as rm6 } from "node:fs/promises";
+import { readFile as readFile11, rm as rm6 } from "node:fs/promises";
 import os from "node:os";
-import path45 from "node:path";
+import path46 from "node:path";
 import { pathToFileURL } from "node:url";
 import { createIndex } from "pagefind";
 import colors11 from "picocolors";
@@ -15052,7 +15211,7 @@ function throttle(fn) {
 init_joinUrl();
 import { createWriteStream, existsSync as existsSync4 } from "node:fs";
 import { mkdir as mkdir10 } from "node:fs/promises";
-import path43 from "node:path";
+import path44 from "node:path";
 import colors9 from "picocolors";
 import { SitemapStream } from "sitemap";
 async function generateSitemap({
@@ -15066,11 +15225,11 @@ async function generateSitemap({
     return;
   }
   const sitemap = new SitemapStream({ hostname: config2.siteUrl });
-  const outputDir = path43.resolve(baseOutputDir, config2.outDir ?? "");
+  const outputDir = path44.resolve(baseOutputDir, config2.outDir ?? "");
   if (!existsSync4(outputDir)) {
     await mkdir10(outputDir, { recursive: true });
   }
-  const sitemapOutputPath = path43.join(outputDir, "sitemap.xml");
+  const sitemapOutputPath = path44.join(outputDir, "sitemap.xml");
   const writeStream = createWriteStream(sitemapOutputPath);
   sitemap.pipe(writeStream);
   let lastmod;
@@ -15100,14 +15259,14 @@ async function generateSitemap({
 
 // src/vite/prerender/utils.ts
 init_joinUrl();
-var resolveRoutePath = (path95) => {
-  const segments = path95.split("/");
+var resolveRoutePath = (path97) => {
+  const segments = path97.split("/");
   if (segments.some((s) => s.startsWith(":") && !s.endsWith("?"))) {
     return void 0;
   }
   return segments.filter((s) => !s.startsWith(":")).join("/") || void 0;
 };
-var isSkipped = (path95) => path95.includes("*") || /^\d+$/.test(path95);
+var isSkipped = (path97) => path97.includes("*") || /^\d+$/.test(path97);
 var resolveRoutes = (routes, parentPath = "") => routes.flatMap((route) => {
   if (route.path && isSkipped(route.path)) return [];
   const routePath = route.path ? resolveRoutePath(route.path) : void 0;
@@ -15156,12 +15315,12 @@ var prerender = async ({
   serverConfigFilename,
   writeRedirects = true
 }) => {
-  const distDir = path45.join(dir, "dist", basePath);
+  const distDir = path46.join(dir, "dist", basePath);
   const serverConfigPath = pathToFileURL(
-    path45.join(distDir, "server", serverConfigFilename)
+    path46.join(distDir, "server", serverConfigFilename)
   ).href;
   const entryServerPath = pathToFileURL(
-    path45.join(distDir, "server/entry.server.js")
+    path46.join(distDir, "server/entry.server.js")
   ).href;
   const rawConfig = await import(serverConfigPath).then(
     (m) => m.default
@@ -15246,7 +15405,7 @@ var prerender = async ({
     })
   );
   const pagefindWriteResult = await pagefindIndex?.writeFiles({
-    outputPath: path45.join(distDir, "pagefind")
+    outputPath: path46.join(distDir, "pagefind")
   });
   const seconds = ((performance.now() - start) / 1e3).toFixed(1);
   const message = `\u2713 finished prerendering ${paths.length} routes in ${seconds} seconds using ${maxThreads} workers`;
@@ -15278,13 +15437,13 @@ var prerender = async ({
     const { generateLlmsTxtFiles: generateLlmsTxtFiles2 } = await Promise.resolve().then(() => (init_llms(), llms_exports));
     const docsConfig = DocsConfigSchema2.parse(config2.docs);
     const llmsConfig = docsConfig.llms ?? {};
-    const markdownInfoPath = path45.join(
+    const markdownInfoPath = path46.join(
       dir,
       "node_modules/.apitogo/markdown-info.json"
     );
     let markdownFileInfos = [];
     if (await fileExists(markdownInfoPath)) {
-      const markdownInfoContent = await readFile9(markdownInfoPath, "utf-8");
+      const markdownInfoContent = await readFile11(markdownInfoPath, "utf-8");
       markdownFileInfos = JSON.parse(markdownInfoContent);
     }
     if (llmsConfig.llmsTxt || llmsConfig.llmsTxtFull) {
@@ -15369,7 +15528,7 @@ async function runBuild(options) {
       html,
       basePath: config2.basePath
     });
-    await rm7(path46.join(clientOutDir, "index.html"), { force: true });
+    await rm7(path47.join(clientOutDir, "index.html"), { force: true });
   } else {
     await runPrerender({
       dir,
@@ -15393,7 +15552,7 @@ var runPrerender = async (options) => {
       serverConfigFilename,
       writeRedirects: process.env.VERCEL === void 0
     });
-    const indexHtml = path46.join(clientOutDir, "index.html");
+    const indexHtml = path47.join(clientOutDir, "index.html");
     if (!workerResults.find((r) => r.outputPath === indexHtml)) {
       await writeFile13(indexHtml, html, "utf-8");
     }
@@ -15403,15 +15562,15 @@ var runPrerender = async (options) => {
     for (const statusPage of statusPages) {
       await rename5(
         statusPage,
-        path46.join(dir, DIST_DIR, path46.basename(statusPage))
+        path47.join(dir, DIST_DIR, path47.basename(statusPage))
       );
     }
     await rm7(serverOutDir, { recursive: true, force: true });
     if (process.env.VERCEL) {
-      await mkdir11(path46.join(dir, ".vercel/output/static"), { recursive: true });
+      await mkdir11(path47.join(dir, ".vercel/output/static"), { recursive: true });
       await rename5(
-        path46.join(dir, DIST_DIR),
-        path46.join(dir, ".vercel/output/static")
+        path47.join(dir, DIST_DIR),
+        path47.join(dir, ".vercel/output/static")
       );
     }
     await writeOutput(dir, {
@@ -15421,7 +15580,7 @@ var runPrerender = async (options) => {
     });
     if (ZuploEnv.isZuplo && issuer) {
       await writeFile13(
-        path46.join(dir, DIST_DIR, ".output/zuplo.json"),
+        path47.join(dir, DIST_DIR, ".output/zuplo.json"),
         JSON.stringify({ issuer }, null, 2),
         "utf-8"
       );
@@ -15433,10 +15592,10 @@ var runPrerender = async (options) => {
 };
 var bundleSSREntry = async (options) => {
   const { dir, adapter, serverOutDir, serverConfigFilename, html, basePath } = options;
-  const tempEntryPath = path46.join(dir, "__ssr-entry.ts");
+  const tempEntryPath = path47.join(dir, "__ssr-entry.ts");
   const packageRoot = getZudokuRootDir();
-  const templateContent = await readFile10(
-    path46.join(packageRoot, "src/vite/ssr-templates", `${adapter}.ts`),
+  const templateContent = await readFile12(
+    path47.join(packageRoot, "src/vite/ssr-templates", `${adapter}.ts`),
     "utf-8"
   );
   const entryContent = templateContent.replace('"__TEMPLATE__"', JSON.stringify(html)).replace('"__CONFIG_FILE__"', JSON.stringify(`./${serverConfigFilename}`)).replace(
@@ -15451,9 +15610,9 @@ var bundleSSREntry = async (options) => {
       platform: adapter === "node" ? "node" : "neutral",
       target: "es2022",
       format: "esm",
-      outfile: path46.join(serverOutDir, "entry.js"),
+      outfile: path47.join(serverOutDir, "entry.js"),
       external: ["./entry.server.js", `./${serverConfigFilename}`],
-      nodePaths: [path46.join(packageRoot, "node_modules")],
+      nodePaths: [path47.join(packageRoot, "node_modules")],
       banner: { js: "// Bundled SSR entry" }
     });
   } finally {
@@ -15466,8 +15625,8 @@ init_package_json();
 
 // src/cli/init/v2-packages.ts
 import { existsSync as existsSync5 } from "node:fs";
-import { readFile as readFile11, writeFile as writeFile14 } from "node:fs/promises";
-import path47 from "node:path";
+import { readFile as readFile13, writeFile as writeFile14 } from "node:fs/promises";
+import path48 from "node:path";
 var CORE_PACKAGES = [
   "@lukoweb/apitogo",
   "react",
@@ -15484,7 +15643,7 @@ function packageNameFrom(name) {
   return slug || "portal";
 }
 async function ensurePackageJson(dir, name) {
-  const file = path47.join(dir, "package.json");
+  const file = path48.join(dir, "package.json");
   if (existsSync5(file)) return false;
   await writeFile14(
     file,
@@ -15503,11 +15662,11 @@ async function ensurePackageJson(dir, name) {
   return true;
 }
 function isPackageInstalled(startDir, name) {
-  let dir = path47.resolve(startDir);
+  let dir = path48.resolve(startDir);
   for (; ; ) {
-    if (existsSync5(path47.join(dir, "node_modules", name, "package.json")))
+    if (existsSync5(path48.join(dir, "node_modules", name, "package.json")))
       return true;
-    const parent = path47.dirname(dir);
+    const parent = path48.dirname(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -15563,7 +15722,7 @@ function portalBuildStep(context, options = {}, build2 = runBuild) {
   return {
     name: "build",
     hash: () => hash2,
-    stillValid: () => access4(path48.join(buildDir, "index.html")).then(
+    stillValid: () => access4(path49.join(buildDir, "index.html")).then(
       () => true,
       () => false
     ),
@@ -15580,11 +15739,11 @@ function portalBuildStep(context, options = {}, build2 = runBuild) {
         else process.env.NODE_ENV = originalNodeEnv;
       }
       await rm8(buildDir, { recursive: true, force: true });
-      await mkdir12(path48.dirname(buildDir), { recursive: true });
-      await rename6(path48.join(root, "dist"), buildDir);
+      await mkdir12(path49.dirname(buildDir), { recursive: true });
+      await rename6(path49.join(root, "dist"), buildDir);
       if (prepared.publishedManifest) {
         await writeFile15(
-          path48.join(buildDir, MANIFEST_FILE),
+          path49.join(buildDir, MANIFEST_FILE),
           `${JSON.stringify(prepared.publishedManifest, null, 2)}
 `
         );
@@ -15613,17 +15772,17 @@ async function buildV2(options) {
 }
 
 // src/cli/check/gateway-online.ts
-import { readFile as readFile13 } from "node:fs/promises";
+import { readFile as readFile15 } from "node:fs/promises";
 var SPEC_SEND_LIMIT = 5 * 1024 * 1024 + 64 * 1024;
-var issue2 = (code, path95, message, hint) => ({ code, path: path95, message, hint });
+var issue2 = (code, path97, message, hint) => ({ code, path: path97, message, hint });
 function capabilityIssues(gateway, answer) {
   const can = answer.capabilities;
   const plan2 = `your ${answer.tier} plan`;
   const found = [];
-  const unsupported = (path95, what, hint) => found.push(
+  const unsupported = (path97, what, hint) => found.push(
     issue2(
       "GATEWAY_CAPABILITY_UNSUPPORTED",
-      path95,
+      path97,
       `${what} is not available on ${plan2}.`,
       hint
     )
@@ -15677,7 +15836,7 @@ async function onlineGatewayRules(gateway, projectId, api, derivedCors = []) {
   const specFile = gateway.specs[0];
   if (specFile) {
     try {
-      const text = await readFile13(specFile, "utf8");
+      const text = await readFile15(specFile, "utf8");
       if (text.length <= SPEC_SEND_LIMIT) spec = text;
     } catch {
     }
@@ -15704,9 +15863,9 @@ async function onlineGatewayRules(gateway, projectId, api, derivedCors = []) {
 }
 
 // src/cli/deploy/plans-file.ts
-init_invariant();
-import { readFile as readFile14 } from "node:fs/promises";
+import { readFile as readFile16 } from "node:fs/promises";
 import { z as z14 } from "zod";
+init_invariant();
 var PlansFileError = class extends ApitogoError {
   constructor(code, message, developerHint) {
     super(message, { developerHint, title: "Cannot read the plans file" });
@@ -15749,7 +15908,7 @@ var issuesOf = (error) => error.issues.map(
 async function readPlansFile(file) {
   let text;
   try {
-    text = await readFile14(file, "utf8");
+    text = await readFile16(file, "utf8");
   } catch {
     throw new PlansFileError(
       "PLANS_FILE_UNREADABLE",
@@ -15790,12 +15949,12 @@ async function readPlansFile(file) {
 var BILLING_PERIOD = { month: "monthly", year: "annual" };
 function toPlatformPlans(plans, options = {}) {
   return plans.map((plan2, index) => {
-    const paid = plan2.pricingModel !== "custom" && (plan2.priceAmount ?? 0) > 0;
+    const paid = isPaidPlan(plan2);
     if (paid && !options.billing)
       throw new PlansFileError(
         "PLANS_PAID_UNSUPPORTED",
-        `The plan "${plan2.sku}" has a price, and plans.billing.provider is not stripe, so nobody could pay for it.`,
-        "Set plans.billing.provider to stripe (with plans.billing.apiKey), or set priceAmount to 0 (or pricingModel to custom for a contact-us plan)."
+        `The plan "${plan2.sku}" has a price, but plans.billing.provider is "none", so nobody could pay for it.`,
+        "Remove plans.billing.provider (Stripe is the provider; deploy asks for its key), or set priceAmount to 0 (or pricingModel to custom for a contact-us plan)."
       );
     const limits = plan2.limits ? {
       ...plan2.limits.rateLimit ? {
@@ -15827,9 +15986,9 @@ function toPlatformPlans(plans, options = {}) {
 }
 
 // src/cli/check/services-online.ts
-var issue3 = (code, path95, message, hint) => ({
+var issue3 = (code, path97, message, hint) => ({
   code,
-  path: path95,
+  path: path97,
   message,
   hint
 });
@@ -15940,7 +16099,7 @@ async function onlinePlansRules(resolved, projectId, api) {
 async function isConfigV2(dir) {
   try {
     return /"version"\s*:\s*2\b/.test(
-      await readFile15(path49.join(dir, APITOGO_CONFIG_FILENAME), "utf8")
+      await readFile17(path50.join(dir, APITOGO_CONFIG_FILENAME), "utf8")
     );
   } catch {
     return false;
@@ -16087,7 +16246,7 @@ async function validatePortalBuild(dir) {
   }
 }
 async function runCheckV2(dir, args = {}, deps = {}) {
-  const configPath = path49.join(dir, APITOGO_CONFIG_FILENAME);
+  const configPath = path50.join(dir, APITOGO_CONFIG_FILENAME);
   let report;
   try {
     const { config: config2, resolved } = loadConfigV2(dir);
@@ -16197,7 +16356,7 @@ async function checkV2(dir, args, deps = platformDependencies(args)) {
 init_package_json();
 
 // src/cli/init/v2-handler.ts
-import path50 from "node:path";
+import path51 from "node:path";
 import { createInterface } from "node:readline/promises";
 function parseDocsFlag(value) {
   if (value === void 0) return void 0;
@@ -16219,15 +16378,15 @@ async function ask(question) {
 }
 function describePlan(plan2) {
   return {
-    willCreate: plan2.entries.filter((entry) => !plan2.keep.includes(entry.path)).map((entry) => path50.relative(plan2.dir, entry.path)),
-    willKeep: plan2.keep.map((target) => path50.relative(plan2.dir, target)),
+    willCreate: plan2.entries.filter((entry) => !plan2.keep.includes(entry.path)).map((entry) => path51.relative(plan2.dir, entry.path)),
+    willKeep: plan2.keep.map((target) => path51.relative(plan2.dir, target)),
     replacesConfig: plan2.replacesConfig
   };
 }
 async function initV2(argv) {
   const json = argv.json === true;
   try {
-    const dir = path50.resolve(process.cwd(), argv.dir ?? ".");
+    const dir = path51.resolve(process.cwd(), argv.dir ?? ".");
     const plan2 = await planInit({
       dir,
       name: argv.name,
@@ -16268,8 +16427,8 @@ async function initV2(argv) {
             status: "created",
             dir,
             ...describePlan(plan2),
-            created: result.created.map((p) => path50.relative(dir, p)),
-            kept: result.kept.map((p) => path50.relative(dir, p))
+            created: result.created.map((p) => path51.relative(dir, p)),
+            kept: result.kept.map((p) => path51.relative(dir, p))
           },
           null,
           2
@@ -16278,7 +16437,7 @@ async function initV2(argv) {
       return;
     }
     printResultToConsole(
-      `Created ${path50.basename(plan2.configPath)} (config version 2) in ${dir}.`
+      `Created ${path51.basename(plan2.configPath)} (config version 2) in ${dir}.`
     );
     printHintToConsole(
       "Next: add a service with `apitogo add <portal|gateway|identity|plans>`, or run `apitogo create` for a guided setup."
@@ -16306,7 +16465,7 @@ async function initV2(argv) {
 // src/cli/services/packages.ts
 import { spawn } from "node:child_process";
 import { existsSync as existsSync6 } from "node:fs";
-import path51 from "node:path";
+import path52 from "node:path";
 var USER_PANEL_PACKAGE = "@lukoweb/apitogo-module-user-panel";
 var BILLING_PLUGIN_PACKAGE = "@lukoweb/apitogo-plugin-dev-portal-billing";
 var LANDING_PACKAGE = "@lukoweb/apitogo-module-landing";
@@ -16324,18 +16483,18 @@ function packagesForConfig(config2) {
   ];
 }
 function isInstalled(dir, name) {
-  for (let current = path51.resolve(dir); ; current = path51.dirname(current)) {
-    if (existsSync6(path51.join(current, "node_modules", name, "package.json")))
+  for (let current = path52.resolve(dir); ; current = path52.dirname(current)) {
+    if (existsSync6(path52.join(current, "node_modules", name, "package.json")))
       return true;
-    if (path51.dirname(current) === current) return false;
+    if (path52.dirname(current) === current) return false;
   }
 }
 function missingPackages(dir, names) {
   return names.filter((name) => !isInstalled(dir, name));
 }
 function detectPackageManager(dir) {
-  if (existsSync6(path51.join(dir, "pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync6(path51.join(dir, "yarn.lock"))) return "yarn";
+  if (existsSync6(path52.join(dir, "pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync6(path52.join(dir, "yarn.lock"))) return "yarn";
   return "npm";
 }
 function installSpecsCommand(manager, specs) {
@@ -16394,7 +16553,7 @@ async function installMissingPackages(dir, config2, version, options) {
       reason: "--no-install was given",
       command: shown
     };
-  await ensurePackageJson(dir, config2.project?.name ?? path51.basename(dir));
+  await ensurePackageJson(dir, config2.project?.name ?? path52.basename(dir));
   await (options.installer ?? runInstaller)(dir, command2);
   return { status: "installed", packages: missing, command: shown };
 }
@@ -16457,7 +16616,7 @@ var list = (value) => {
   return items.length > 0 ? items : void 0;
 };
 function addOptionsFromArguments(service, argv) {
-  const dir = path52.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path53.resolve(process.cwd(), argv.dir ?? ".");
   const issuers = list(argv.issuer);
   return {
     dir,
@@ -16502,8 +16661,7 @@ function addOptionsFromArguments(service, argv) {
     } : void 0,
     plans: service === "plans" ? {
       file: argv.file,
-      template: argv.template === "free" || argv.template === "tiered" ? argv.template : void 0,
-      billing: argv.billing
+      template: argv.template === "free" || argv.template === "tiered" ? argv.template : void 0
     } : void 0
   };
 }
@@ -16512,8 +16670,8 @@ function describe(edit, dir) {
   return {
     service: edit.service,
     action: edit.action,
-    willCreate: edit.files.map((file) => path52.relative(dir, file.path)),
-    keep: edit.keep.map((file) => path52.relative(dir, file)),
+    willCreate: edit.files.map((file) => path53.relative(dir, file.path)),
+    keep: edit.keep.map((file) => path53.relative(dir, file)),
     notes: edit.notes
   };
 }
@@ -16527,7 +16685,7 @@ async function run(action, argv, plan2, deps = {}) {
         `Choose one of ${SERVICES.join(", ")}.`
       );
     }
-    const dir = path52.resolve(process.cwd(), argv.dir ?? ".");
+    const dir = path53.resolve(process.cwd(), argv.dir ?? ".");
     if (!await isConfigV2(dir)) {
       throw new ServiceEditError(
         `${action} works with a config version 2 project, and there is none in ${dir}.`,
@@ -16595,7 +16753,7 @@ async function run(action, argv, plan2, deps = {}) {
           {
             status: action === "add" ? "added" : "removed",
             ...describe(edit, dir),
-            created: created.map((file) => path52.relative(dir, file)),
+            created: created.map((file) => path53.relative(dir, file)),
             ...install ? { packages: install } : {}
           },
           null,
@@ -16605,7 +16763,7 @@ async function run(action, argv, plan2, deps = {}) {
       return;
     }
     printResultToConsole(
-      `${action === "add" ? "Added" : "Removed"} ${edit.service} in ${path52.basename(edit.configPath)}.`
+      `${action === "add" ? "Added" : "Removed"} ${edit.service} in ${path53.basename(edit.configPath)}.`
     );
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
@@ -16666,7 +16824,7 @@ var removeService = (argv) => run(
   "remove",
   argv,
   (service) => planRemoveService(service, {
-    dir: path52.resolve(process.cwd(), argv.dir ?? "."),
+    dir: path53.resolve(process.cwd(), argv.dir ?? "."),
     deleteFiles: argv.deleteFiles === true
   })
 );
@@ -16810,10 +16968,6 @@ var add_default = {
       "none"
     ],
     describe: "Content to create: blank (empty shell), starter (filled example) or full (starter plus a Node.js backend in server/). Plans also accept free, tiered and none; none is blank"
-  }).option("billing", {
-    type: "string",
-    choices: ["stripe", "none"],
-    describe: "plans: billing provider"
   }),
   handler: async (argv) => {
     await captureEvent({ argv, event: "apitogo add" });
@@ -16822,16 +16976,16 @@ var add_default = {
 };
 
 // src/cli/build/handler.ts
-import path54 from "node:path";
+import path55 from "node:path";
 init_logger();
 init_package_json();
 
 // src/cli/preview/handler.ts
-import path53 from "node:path";
+import path54 from "node:path";
 import { preview as vitePreview } from "vite";
 var DEFAULT_PREVIEW_PORT = 4e3;
 async function preview(argv) {
-  const dir = path53.resolve(process.cwd(), argv.dir);
+  const dir = path54.resolve(process.cwd(), argv.dir);
   const viteConfig = await getViteConfig(dir, {
     command: "serve",
     mode: "production",
@@ -16874,7 +17028,7 @@ async function build(argv) {
     printDiagnosticsToConsole("");
     printDiagnosticsToConsole("");
   }
-  const dir = path54.resolve(process.cwd(), argv.dir);
+  const dir = path55.resolve(process.cwd(), argv.dir);
   try {
     if (await isConfigV2(dir)) {
       const result = await buildV2({ dir, jsonOnly });
@@ -16939,10 +17093,10 @@ var build_default = {
 };
 
 // src/cli/check/handler.ts
-import path60 from "node:path";
+import path61 from "node:path";
 
 // src/cli/platform/tools/check-publish-readiness.ts
-import path59 from "node:path";
+import path60 from "node:path";
 
 // src/cli/platform/helpers/dev-portal-backend.ts
 function deriveProvisioningState(backend) {
@@ -17026,8 +17180,8 @@ function formatDevPortalBackendResponse(projectId, backend) {
 // src/cli/platform/helpers/dev-portal-manifest.ts
 init_gateway_limits();
 import { existsSync as existsSync7 } from "node:fs";
-import { access as access5, mkdir as mkdir13, readFile as readFile16, writeFile as writeFile16 } from "node:fs/promises";
-import path55 from "node:path";
+import { access as access5, mkdir as mkdir13, readFile as readFile18, writeFile as writeFile16 } from "node:fs/promises";
+import path56 from "node:path";
 
 // src/cli/make-config/header-pricing-nav.ts
 var HEADER_PRICING_PATH = "/pricing";
@@ -17149,7 +17303,7 @@ function isPlanFree(plan2) {
   return (plan2.priceAmount ?? 0) <= 0;
 }
 function manifestFilePath(siteDirectory) {
-  return path55.join(path55.resolve(siteDirectory), APITOGO_CONFIG_FILENAME2);
+  return path56.join(path56.resolve(siteDirectory), APITOGO_CONFIG_FILENAME2);
 }
 var STORED_MANIFEST_KEYS = [
   "authentication",
@@ -17573,23 +17727,23 @@ function resolveBackendSourceDirectory(siteDirectory, sourceDirectory) {
   if (!trimmed) {
     return void 0;
   }
-  return path55.resolve(siteDirectory, trimmed);
+  return path56.resolve(siteDirectory, trimmed);
 }
 function resolveBackendOpenApiPath(openApiPath, options) {
   const trimmed = openApiPath?.trim();
   if (!trimmed) {
     return void 0;
   }
-  if (path55.isAbsolute(trimmed)) {
+  if (path56.isAbsolute(trimmed)) {
     return trimmed;
   }
-  const siteResolved = path55.resolve(options.siteDirectory, trimmed);
+  const siteResolved = path56.resolve(options.siteDirectory, trimmed);
   if (existsSync7(siteResolved)) {
     return siteResolved;
   }
   const backendDir = options.backendSourceDirectory?.trim();
   if (backendDir) {
-    const backendResolved = path55.resolve(backendDir, trimmed);
+    const backendResolved = path56.resolve(backendDir, trimmed);
     if (existsSync7(backendResolved)) {
       return backendResolved;
     }
@@ -17606,7 +17760,7 @@ function mergePublishPrerequisitesWithPlatformValidation(prerequisites, manifest
 async function readManifest2(siteDirectory) {
   const filePath = manifestFilePath(siteDirectory);
   if (await pathExists(filePath)) {
-    const raw = await readFile16(filePath, "utf8");
+    const raw = await readFile18(filePath, "utf8");
     const config2 = JSON.parse(raw);
     return extractManifestFromConfig(config2);
   }
@@ -17614,10 +17768,10 @@ async function readManifest2(siteDirectory) {
 }
 async function writeManifest2(siteDirectory, manifest) {
   const filePath = manifestFilePath(siteDirectory);
-  await mkdir13(path55.dirname(filePath), { recursive: true });
+  await mkdir13(path56.dirname(filePath), { recursive: true });
   let config2 = {};
   if (await pathExists(filePath)) {
-    const raw = await readFile16(filePath, "utf8");
+    const raw = await readFile18(filePath, "utf8");
     config2 = JSON.parse(raw);
   }
   const {
@@ -17636,11 +17790,11 @@ import {
   access as access6,
   appendFile,
   mkdir as mkdir14,
-  readFile as readFile17,
+  readFile as readFile19,
   unlink,
   writeFile as writeFile17
 } from "node:fs/promises";
-import path56 from "node:path";
+import path57 from "node:path";
 var ENV_FILENAME = ".env";
 var COLLAPSED_UPPERCASE_ALIASES2 = {
   SECRETKEY: "secretKey",
@@ -17742,7 +17896,7 @@ function applyEnvOverrides2(config2, env) {
 }
 async function readEnvFile(filePath) {
   try {
-    const raw = await readFile17(filePath, "utf8");
+    const raw = await readFile19(filePath, "utf8");
     const env = {};
     for (const line2 of raw.split("\n")) {
       const trimmed = line2.trim();
@@ -17759,12 +17913,12 @@ async function readEnvFile(filePath) {
   }
 }
 async function loadSiteEnv(siteDirectory) {
-  const resolvedDirectory = path56.resolve(siteDirectory);
+  const resolvedDirectory = path57.resolve(siteDirectory);
   const merged = { ...process.env };
   for (const fileName of [ENV_FILENAME, ".env.local"]) {
     Object.assign(
       merged,
-      await readEnvFile(path56.join(resolvedDirectory, fileName))
+      await readEnvFile(path57.join(resolvedDirectory, fileName))
     );
   }
   return merged;
@@ -17801,7 +17955,7 @@ function buildAuthSecretsJson(secrets2, options) {
   return payload;
 }
 function envFilePath(siteDirectory) {
-  return path56.join(path56.resolve(siteDirectory), ENV_FILENAME);
+  return path57.join(path57.resolve(siteDirectory), ENV_FILENAME);
 }
 function getSecretsStatus(siteDirectory, manifest, secrets2, envExists) {
   const providerSecretStatus = {};
@@ -17837,7 +17991,7 @@ function validateSecretsForPublish(manifest, secrets2, emailOptions) {
 }
 async function siteEnvFileHasEntries(siteDirectory) {
   for (const fileName of [ENV_FILENAME, ".env.local"]) {
-    const loaded = await readEnvFile(path56.join(siteDirectory, fileName));
+    const loaded = await readEnvFile(path57.join(siteDirectory, fileName));
     if (Object.keys(loaded).length > 0) {
       return true;
     }
@@ -17845,7 +17999,7 @@ async function siteEnvFileHasEntries(siteDirectory) {
   return false;
 }
 async function resolvePublishConfig(siteDirectory, emailOptions) {
-  const resolvedDirectory = path56.resolve(siteDirectory);
+  const resolvedDirectory = path57.resolve(siteDirectory);
   const manifestRaw = await readManifest2(resolvedDirectory);
   if (!manifestRaw) {
     throw new Error("apitogo.config.json not found in sourceDirectory.");
@@ -17875,13 +18029,13 @@ var SECRETS_COLLECTION_INSTRUCTION = "For go-live, plans must already be in apit
 
 // src/cli/platform/helpers/dev-portal-site-validation.ts
 init_gateway_limits();
-import { readFile as readFile18 } from "node:fs/promises";
+import { readFile as readFile20 } from "node:fs/promises";
 import { createRequire as createRequire2 } from "node:module";
-import path57 from "node:path";
+import path58 from "node:path";
 var cachedFallbackTs;
 async function loadTypeScriptForSite(sourceDirectory) {
   const require2 = createRequire2(
-    path57.join(path57.resolve(sourceDirectory), "package.json")
+    path58.join(path58.resolve(sourceDirectory), "package.json")
   );
   try {
     return require2("typescript");
@@ -17928,7 +18082,7 @@ async function referencedFileExists(sourceDirectory, reference) {
     return true;
   }
   return pathExists(
-    path57.resolve(sourceDirectory, reference.replace(/^\.\//, ""))
+    path58.resolve(sourceDirectory, reference.replace(/^\.\//, ""))
   );
 }
 async function validateSiteConfigStructure(config2, sourceDirectory) {
@@ -18043,17 +18197,17 @@ var DEFAULT_TSX_CANDIDATES = [
   "landing/LandingPage.tsx"
 ];
 async function validateDevPortalSiteConfig(sourceDirectory, options) {
-  const resolvedDir = path57.resolve(sourceDirectory);
+  const resolvedDir = path58.resolve(sourceDirectory);
   const issues = [];
   const checkedFiles = [];
   const skippedChecks = [];
-  const jsonPath = path57.join(resolvedDir, APITOGO_CONFIG_FILENAME2);
+  const jsonPath = path58.join(resolvedDir, APITOGO_CONFIG_FILENAME2);
   if (await pathExists(jsonPath)) {
     checkedFiles.push(APITOGO_CONFIG_FILENAME2);
     let parsed;
     let parseFailed = false;
     try {
-      parsed = JSON.parse(await readFile18(jsonPath, "utf8"));
+      parsed = JSON.parse(await readFile20(jsonPath, "utf8"));
     } catch (error) {
       parseFailed = true;
       issues.push({
@@ -18079,7 +18233,7 @@ async function validateDevPortalSiteConfig(sourceDirectory, options) {
   );
   const existingTsxFiles = [];
   for (const relativeFile of tsxFiles) {
-    if (await pathExists(path57.join(resolvedDir, relativeFile))) {
+    if (await pathExists(path58.join(resolvedDir, relativeFile))) {
       existingTsxFiles.push(relativeFile);
     }
   }
@@ -18092,8 +18246,8 @@ async function validateDevPortalSiteConfig(sourceDirectory, options) {
     } else {
       for (const relativeFile of existingTsxFiles) {
         checkedFiles.push(relativeFile);
-        const content = await readFile18(
-          path57.join(resolvedDir, relativeFile),
+        const content = await readFile20(
+          path58.join(resolvedDir, relativeFile),
           "utf8"
         );
         issues.push(
@@ -18115,8 +18269,8 @@ async function validateDevPortalSiteConfig(sourceDirectory, options) {
 
 // src/cli/platform/helpers/npm-build.ts
 import { spawn as spawn2 } from "node:child_process";
-import { access as access7, readFile as readFile19 } from "node:fs/promises";
-import path58 from "node:path";
+import { access as access7, readFile as readFile21 } from "node:fs/promises";
+import path59 from "node:path";
 var BUILD_LOG_TAIL_BYTES = 8192;
 var MIN_NODE_MAJOR = 20;
 var NpmBuildError = class extends Error {
@@ -18183,13 +18337,13 @@ function runCommand(command2, args, cwd, env) {
 }
 async function runNpmInstall(sourceDirectory, options) {
   assertNodeVersion(options?.nodeVersion);
-  const cwd = path58.resolve(sourceDirectory);
-  const packageJsonPath = path58.join(cwd, "package.json");
+  const cwd = path59.resolve(sourceDirectory);
+  const packageJsonPath = path59.join(cwd, "package.json");
   if (!await pathExists2(packageJsonPath)) {
     throw new Error(`package.json not found in sourceDirectory: ${cwd}`);
   }
   const startedAt = Date.now();
-  const lockPath = path58.join(cwd, "package-lock.json");
+  const lockPath = path59.join(cwd, "package-lock.json");
   const installArgs = await pathExists2(lockPath) ? ["ci"] : ["install"];
   const install = await runCommand("npm", installArgs, cwd);
   const installLog = install.output;
@@ -18207,8 +18361,8 @@ async function runNpmInstall(sourceDirectory, options) {
 }
 async function runNpmBuild(sourceDirectory, options) {
   assertNodeVersion(options?.nodeVersion);
-  const cwd = path58.resolve(sourceDirectory);
-  const packageJsonPath = path58.join(cwd, "package.json");
+  const cwd = path59.resolve(sourceDirectory);
+  const packageJsonPath = path59.join(cwd, "package.json");
   if (!await pathExists2(packageJsonPath)) {
     throw new Error(`package.json not found in sourceDirectory: ${cwd}`);
   }
@@ -18225,8 +18379,8 @@ async function runNpmBuild(sourceDirectory, options) {
       build2.exitCode
     );
   }
-  const distPath = path58.join(cwd, "dist");
-  const indexPath = path58.join(distPath, "index.html");
+  const distPath = path59.join(cwd, "dist");
+  const indexPath = path59.join(distPath, "index.html");
   if (!await pathExists2(indexPath)) {
     throw new NpmBuildError(
       `Build completed but dist/index.html was not found at ${indexPath}`,
@@ -18610,7 +18764,7 @@ function validateManifestForPlatformPublish(manifest) {
 
 // src/cli/platform/tools/check-publish-readiness.ts
 async function checkPublishReadiness(client, _config, args) {
-  const sourceDirectory = path59.resolve(args.sourceDirectory);
+  const sourceDirectory = path60.resolve(args.sourceDirectory);
   const manifest = await readManifest2(sourceDirectory) ?? createScaffoldManifest();
   const emailOptions = await resolveEmailOptionsForPublish(
     client,
@@ -18688,7 +18842,7 @@ async function checkPublishReadiness(client, _config, args) {
 
 // src/cli/check/handler.ts
 async function check(argv) {
-  const sourceDirectory = path60.resolve(process.cwd(), argv.dir);
+  const sourceDirectory = path61.resolve(process.cwd(), argv.dir);
   if (await isConfigV2(sourceDirectory)) {
     await checkV2(sourceDirectory, argv);
     return;
@@ -18752,7 +18906,7 @@ var check_default = {
 
 // src/cli/make-config/handler.ts
 init_invariant();
-import path62 from "node:path";
+import path63 from "node:path";
 import { stdin as input2 } from "node:process";
 
 // src/cli/make-config/interactive.ts
@@ -18761,9 +18915,9 @@ import { createInterface as createInterface3 } from "node:readline/promises";
 
 // src/cli/make-config/v2-edits.ts
 init_apitogo_config_core();
-import { access as access8, mkdir as mkdir15, readFile as readFile20, writeFile as writeFile18 } from "node:fs/promises";
-import path61 from "node:path";
-import { glob as glob7 } from "glob";
+import { access as access8, mkdir as mkdir15, readFile as readFile22, writeFile as writeFile18 } from "node:fs/promises";
+import path62 from "node:path";
+import { glob as glob8 } from "glob";
 init_invariant();
 var ConfigEditError = class extends ApitogoError {
   constructor(message, developerHint) {
@@ -18775,10 +18929,10 @@ var exists4 = (target) => access8(target).then(
   () => true,
   () => false
 );
-var toPosix2 = (value) => value.split(path61.sep).join("/");
-var relativeToConfig = (project, target) => toPosix2(path61.relative(project.resolved.configDir, target)) || ".";
+var toPosix2 = (value) => value.split(path62.sep).join("/");
+var relativeToConfig = (project, target) => toPosix2(path62.relative(project.resolved.configDir, target)) || ".";
 async function openConfigProject(dir) {
-  const configPath = path61.join(dir, APITOGO_CONFIG_FILENAME);
+  const configPath = path62.join(dir, APITOGO_CONFIG_FILENAME);
   if (!await exists4(configPath)) {
     throw new ConfigEditError(
       `There is no ${APITOGO_CONFIG_FILENAME} in ${dir}.`,
@@ -18843,7 +18997,7 @@ function setPortalName(project, name) {
 }
 async function addGatewaySpec(project, specPath) {
   const gateway = requireGateway(project);
-  const absolute = path61.resolve(project.dir, specPath);
+  const absolute = path62.resolve(project.dir, specPath);
   if (!await exists4(absolute)) {
     throw new ConfigEditError(`The OpenAPI file ${specPath} does not exist.`);
   }
@@ -18887,7 +19041,7 @@ function parseBackendInput(input5) {
 }
 async function setGatewayOrigin(project, backend) {
   const gateway = requireGateway(project);
-  const source = path61.resolve(project.dir, backend.source);
+  const source = path62.resolve(project.dir, backend.source);
   if (!await exists4(source)) {
     throw new ConfigEditError(
       `The API source folder ${backend.source} does not exist.`
@@ -18925,6 +19079,33 @@ title: ${JSON.stringify(title)}
 ${body}
 `;
 }
+function pageComponentName(slug) {
+  const name = slug.split(/[^A-Za-z0-9]+/).filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join("");
+  return `${/^[0-9]/.test(name) ? "Page" : ""}${name || "Docs"}Page`;
+}
+function buildTsxDocsPage(slug, title, file, content) {
+  const text = content?.trim() ? `{${JSON.stringify(content.trim())}}` : "This page is a React component. Change it like any other component: add state, fetch data, or use the portal's components.";
+  return `import { Callout, Heading, Typography } from "@lukoweb/apitogo/components";
+
+/** The page's label in the sidebar. */
+export const title = ${JSON.stringify(title)};
+
+export default function ${pageComponentName(slug)}() {
+  return (
+    <section className="mx-auto max-w-screen-lg px-4 py-12 pt-(--padding-content-top)">
+      <Typography>
+        <Heading level={1}>{title}</Heading>
+        <p>${text}</p>
+        <Callout type="info" title="Where this page lives">
+          Edit <code>${file}</code>. Files whose name starts with <code>_</code> are not pages, so you can keep shared
+          components next to your pages.
+        </Callout>
+      </Typography>
+    </section>
+  );
+}
+`;
+}
 async function writeDocsPage(project, input5) {
   requirePortal(project);
   if (/^[A-Za-z]:[\\/]/.test(input5.slug.trim())) {
@@ -18942,29 +19123,36 @@ async function writeDocsPage(project, input5) {
   }
   const slug = normalizeDocsSlug(input5.slug);
   if (!slug) throw new ConfigEditError("The page path must not be empty.");
-  const base = path61.join(portal.dir, "pages", ...slug.split("/"));
+  const base = path62.join(portal.dir, "pages", ...slug.split("/"));
   const existing = (await Promise.all(
-    [`${base}.mdx`, `${base}.md`].map(
+    [`${base}.tsx`, `${base}.mdx`, `${base}.md`].map(
       async (file2) => await exists4(file2) ? file2 : null
     )
   )).find((file2) => file2 !== null);
+  const relative = (file2) => toPosix2(path62.relative(project.dir, file2));
+  const write = (file2, title) => writeFile18(
+    file2,
+    file2.endsWith(".tsx") ? buildTsxDocsPage(slug, title, relative(file2), input5.content) : buildDocsPage(title, input5.content),
+    "utf8"
+  );
   let file;
   let action;
   if (input5.update) {
     if (!existing) {
       throw new ConfigEditError(
-        `There is no page at ${toPosix2(path61.relative(project.dir, `${base}.mdx`))}.`,
+        `There is no page at ${relative(`${base}.${input5.format ?? "tsx"}`)}.`,
         "Leave out --page-update to add it."
       );
     }
-    const title = input5.title?.trim() || titleOf(await readFile20(existing, "utf8"));
+    const source = await readFile22(existing, "utf8");
+    const title = input5.title?.trim() || (existing.endsWith(".tsx") ? tsxPageLabel(source, existing) : titleOf(source));
     file = existing;
     action = "updated";
-    await writeFile18(file, buildDocsPage(title ?? slug, input5.content), "utf8");
+    await write(file, title ?? slug);
   } else {
     if (existing) {
       throw new ConfigEditError(
-        `A page already exists at ${toPosix2(path61.relative(project.dir, existing))}.`,
+        `A page already exists at ${relative(existing)}.`,
         "Pass --page-update to change it."
       );
     }
@@ -18972,20 +19160,19 @@ async function writeDocsPage(project, input5) {
     if (!title) {
       throw new ConfigEditError("A new page needs a title (--page-title).");
     }
-    file = `${base}.mdx`;
+    file = `${base}.${input5.format ?? "tsx"}`;
     action = "added";
-    await mkdir15(path61.dirname(file), { recursive: true });
-    await writeFile18(file, buildDocsPage(title, input5.content), "utf8");
+    await mkdir15(path62.dirname(file), { recursive: true });
+    await write(file, title);
   }
-  const included = await glob7(portal.docs.content, { absolute: true });
-  const inPortal = included.some(
-    (match) => path61.resolve(match) === path61.resolve(file)
-  );
+  const same = (match) => path62.resolve(match) === path62.resolve(file);
+  const inPortal = file.endsWith(".tsx") ? (await findTsxPages(portal.docs.content)).some((page) => same(page.file)) : (await glob8(portal.docs.content, { absolute: true })).some(same);
   return {
     action,
     slug,
     route: `/${slug}`,
-    file: toPosix2(path61.relative(project.dir, file)),
+    file: relative(file),
+    format: path62.extname(file).slice(1),
     inPortal
   };
 }
@@ -19046,7 +19233,7 @@ async function upsertPlan(project, plan2) {
   if (await exists4(plans.file)) {
     let raw;
     try {
-      raw = JSON.parse(await readFile20(plans.file, "utf8"));
+      raw = JSON.parse(await readFile22(plans.file, "utf8"));
     } catch (error) {
       throw new ConfigEditError(
         `${relativeToConfig(project, plans.file)} is not valid JSON (${error.message}).`
@@ -19066,18 +19253,18 @@ async function upsertPlan(project, plan2) {
   const next = [...catalog.plans];
   if (index === -1) next.push(plan2);
   else next[index] = plan2;
-  await mkdir15(path61.dirname(plans.file), { recursive: true });
+  await mkdir15(path62.dirname(plans.file), { recursive: true });
   await writeFile18(
     plans.file,
     `${JSON.stringify({ ...catalog, plans: next }, null, 2)}
 `,
     "utf8"
   );
-  const paid = plan2.pricingModel !== "custom" && (plan2.priceAmount ?? 0) > 0;
+  const paid = isPaidPlan(plan2);
   return {
     action: index === -1 ? "added" : "updated",
     sku: plan2.sku,
-    file: toPosix2(path61.relative(project.dir, plans.file)),
+    file: toPosix2(path62.relative(project.dir, plans.file)),
     paid,
     needsBilling: paid && plans.billing.provider !== "stripe"
   };
@@ -19105,7 +19292,7 @@ function printPageResult(page) {
   );
   if (page.inPortal) {
     printHintToConsole(
-      "The sidebar is built from the pages folder, so the config does not change. Edit the file to change the content."
+      page.format === "tsx" ? "The page is a React component: edit it like any component. The sidebar is built from the pages folder, so the config does not change." : "The sidebar is built from the pages folder, so the config does not change. Edit the file to change the content."
     );
   } else {
     printWarningToConsole(
@@ -19117,7 +19304,12 @@ function printPlanResult(plan2) {
   printSuccessToConsole(`Plan "${plan2.sku}" ${plan2.action} in ${plan2.file}.`);
   if (plan2.needsBilling) {
     printWarningToConsole(
-      "This plan has a price and plans.billing.provider is not stripe, so deploy will refuse it. Set plans.billing.provider to stripe, or make the plan free or custom."
+      'This plan has a price, but plans.billing.provider is "none", so deploy will refuse it. Remove plans.billing.provider (Stripe is the provider), or make the plan free or custom.'
+    );
+  }
+  if (plan2.paid && !plan2.needsBilling) {
+    printHintToConsole(
+      "Payments go through Stripe: apitogo deploy asks for your Stripe secret key if the project has none yet."
     );
   }
   if (plan2.paid) printPaidPlanPlatformWarning();
@@ -19346,7 +19538,7 @@ async function applyConfigFlags(project, argv, changes) {
   return { project: next, openApi };
 }
 async function makeConfig(argv) {
-  const dir = path62.resolve(process.cwd(), argv.dir);
+  const dir = path63.resolve(process.cwd(), argv.dir);
   const interactive = shouldRunInteractive(argv);
   const json = argv.json === true;
   const changes = [];
@@ -19393,7 +19585,8 @@ async function makeConfig(argv) {
           slug: argv.pageSlug,
           title: argv.pageTitle,
           content: argv.pageContent,
-          update: argv.pageUpdate === true
+          update: argv.pageUpdate === true,
+          format: argv.pageFormat
         });
         changes.push(page.action === "added" ? "page_add" : "page_update");
       }
@@ -19480,13 +19673,17 @@ function addConfigOptions(yargs2) {
     describe: "Runtime version of --source, for example NODE_22_LTS"
   }).option("page-slug", {
     type: "string",
-    describe: "Add or update a docs page at <portal>/pages/<slug>.mdx (for example guides/quickstart)"
+    describe: "Add or update a docs page at <portal>/pages/<slug>.tsx (for example guides/quickstart)"
   }).option("page-title", {
     type: "string",
     describe: "Title of --page-slug (required when adding)"
   }).option("page-content", {
     type: "string",
-    describe: "Markdown body of --page-slug"
+    describe: "Text of --page-slug (Markdown for an .mdx page)"
+  }).option("page-format", {
+    type: "string",
+    choices: ["tsx", "mdx"],
+    describe: "Format of a new page: tsx (a React component, the default) or mdx (Markdown)"
   }).option("page-update", {
     type: "boolean",
     default: false,
@@ -19512,15 +19709,15 @@ var config_default = {
 // src/cli/create/handler.ts
 init_apitogo_config_core();
 import { execFile } from "node:child_process";
-import { readFile as readFile21 } from "node:fs/promises";
-import path63 from "node:path";
+import { readFile as readFile23 } from "node:fs/promises";
+import path64 from "node:path";
 import { promisify } from "node:util";
 var execFileAsync = promisify(execFile);
 function nextStepHint(dir) {
   const linked = loadConfigV2(dir).resolved.project.id;
-  const cd = path63.resolve(dir) === path63.resolve(process.cwd());
+  const cd = path64.resolve(dir) === path64.resolve(process.cwd());
   const steps = linked ? "apitogo deploy" : "apitogo project create, then apitogo deploy";
-  return cd ? `Next: ${steps}` : `Next: cd ${JSON.stringify(path63.relative(process.cwd(), dir))}, then ${steps}`;
+  return cd ? `Next: ${steps}` : `Next: cd ${JSON.stringify(path64.relative(process.cwd(), dir))}, then ${steps}`;
 }
 function projectFolderName(name) {
   return name.trim().replace(/[<>:"/\\|?*\s]+/g, "-").replace(/^[-.]+|[-.]+$/g, "") || "apitogo-project";
@@ -19546,13 +19743,13 @@ async function gitHasUncommittedChanges(dir) {
 async function defaultName(dir) {
   try {
     const parsed = JSON.parse(
-      await readFile21(path63.join(dir, "package.json"), "utf8")
+      await readFile23(path64.join(dir, "package.json"), "utf8")
     );
     if (typeof parsed.name === "string" && parsed.name.trim())
       return parsed.name.replace(/^@[^/]+\//, "");
   } catch {
   }
-  return path63.basename(dir);
+  return path64.basename(dir);
 }
 function parseServicesFlag(value) {
   const names = (value ?? "").split(",").map((name) => name.trim()).filter(Boolean);
@@ -19578,7 +19775,7 @@ async function createProject(argv, deps = {}) {
     if (!json) printDiagnosticsToConsole(line2);
   };
   try {
-    const base = path63.resolve(process.cwd(), argv.dir ?? ".");
+    const base = path64.resolve(process.cwd(), argv.dir ?? ".");
     let dir = base;
     let requested = parseServicesFlag(argv.services);
     let template = argv.template;
@@ -19601,8 +19798,8 @@ async function createProject(argv, deps = {}) {
         default: await defaultName(base)
       }) : await defaultName(base));
       const folder = projectFolderName(name);
-      if (argv.dir === void 0 && folder !== path63.basename(base))
-        dir = path63.join(base, folder);
+      if (argv.dir === void 0 && folder !== path64.basename(base))
+        dir = path64.join(base, folder);
     }
     if (await (deps.hasUncommittedChanges ?? gitHasUncommittedChanges)(dir))
       say(
@@ -19629,7 +19826,7 @@ async function createProject(argv, deps = {}) {
       }
       await applyInitPlan(plan2);
       say(
-        dir === base ? `Created ${APITOGO_CONFIG_FILENAME}.` : `Created ${path63.relative(base, dir)}${path63.sep}${APITOGO_CONFIG_FILENAME}.`
+        dir === base ? `Created ${APITOGO_CONFIG_FILENAME}.` : `Created ${path64.relative(base, dir)}${path64.sep}${APITOGO_CONFIG_FILENAME}.`
       );
     } else {
       say(`${APITOGO_CONFIG_FILENAME} exists: continuing from it.`);
@@ -19772,10 +19969,10 @@ var create_default = {
 };
 
 // src/cli/cmds/deploy.ts
-import path80 from "node:path";
+import path82 from "node:path";
 
 // src/cli/apply/handler.ts
-import path75 from "node:path";
+import path76 from "node:path";
 
 // src/cli/platform/helpers/gateway-plan-validation.ts
 init_gateway_limits();
@@ -19984,11 +20181,11 @@ init_gateway_limits();
 // src/cli/platform/helpers/deploy-artifact-hash.ts
 import { createHash as createHash3 } from "node:crypto";
 import { createReadStream, promises as fs6 } from "node:fs";
-import path65 from "node:path";
+import path66 from "node:path";
 
 // src/cli/platform/helpers/package-files.ts
 import { promises as fs5 } from "node:fs";
-import path64 from "node:path";
+import path65 from "node:path";
 import ignore from "ignore";
 var DEFAULT_EXCLUDES = /* @__PURE__ */ new Set([
   "node_modules",
@@ -20002,7 +20199,7 @@ async function loadGitignore(rootDir, extraExcludes = []) {
   const ig = ignore();
   ig.add(["node_modules/", ".git/", "dist/", "bin/", "obj/"]);
   if (extraExcludes.length > 0) ig.add([...extraExcludes]);
-  const gitignorePath = path64.join(rootDir, ".gitignore");
+  const gitignorePath = path65.join(rootDir, ".gitignore");
   try {
     const content = await fs5.readFile(gitignorePath, "utf8");
     ig.add(content);
@@ -20011,11 +20208,11 @@ async function loadGitignore(rootDir, extraExcludes = []) {
   return ig;
 }
 async function collectFiles(rootDir, relativeDir, ig, files) {
-  const absDir = path64.join(rootDir, relativeDir);
+  const absDir = path65.join(rootDir, relativeDir);
   const entries = await fs5.readdir(absDir, { withFileTypes: true });
   for (const entry of entries) {
-    const rel2 = relativeDir ? path64.join(relativeDir, entry.name) : entry.name;
-    const relPosix = rel2.split(path64.sep).join("/");
+    const rel2 = relativeDir ? path65.join(relativeDir, entry.name) : entry.name;
+    const relPosix = rel2.split(path65.sep).join("/");
     if (DEFAULT_EXCLUDES.has(entry.name) && !relativeDir) {
       continue;
     }
@@ -20030,7 +20227,7 @@ async function collectFiles(rootDir, relativeDir, ig, files) {
   }
 }
 async function collectPackageableFiles(sourceDirectory, extraExcludes = []) {
-  const resolved = path64.resolve(sourceDirectory);
+  const resolved = path65.resolve(sourceDirectory);
   const stat7 = await fs5.stat(resolved).catch(() => null);
   if (!stat7?.isDirectory()) {
     throw new Error(`sourceDirectory is not a directory: ${resolved}`);
@@ -20056,7 +20253,7 @@ async function sha256File(filePath) {
   return hash2.digest("hex");
 }
 async function hashDirectoryContents(rootDirectory, extraExcludes = []) {
-  const resolved = path65.resolve(rootDirectory);
+  const resolved = path66.resolve(rootDirectory);
   const files = (await collectPackageableFiles(resolved, extraExcludes)).sort(
     (a, b) => a.localeCompare(b)
   );
@@ -20064,13 +20261,13 @@ async function hashDirectoryContents(rootDirectory, extraExcludes = []) {
   for (const rel2 of files) {
     hash2.update(rel2);
     hash2.update("\0");
-    hash2.update(await fs6.readFile(path65.join(resolved, rel2)));
+    hash2.update(await fs6.readFile(path66.join(resolved, rel2)));
     hash2.update("\0");
   }
   return hash2.digest("hex");
 }
 async function hashDevPortalSiteSources(siteDirectory, options) {
-  const resolved = path65.resolve(siteDirectory);
+  const resolved = path66.resolve(siteDirectory);
   const hash2 = createHash3("sha256");
   const candidates = [
     "apitogo.config.json",
@@ -20080,7 +20277,7 @@ async function hashDevPortalSiteSources(siteDirectory, options) {
     "zudoku.config.tsx"
   ];
   for (const name of candidates) {
-    const full = path65.join(resolved, name);
+    const full = path66.join(resolved, name);
     try {
       hash2.update(name);
       hash2.update("\0");
@@ -20090,7 +20287,7 @@ async function hashDevPortalSiteSources(siteDirectory, options) {
     }
   }
   for (const dir of ["pages", "landing", "src"]) {
-    const full = path65.join(resolved, dir);
+    const full = path66.join(resolved, dir);
     try {
       const st = await fs6.stat(full);
       if (!st.isDirectory()) continue;
@@ -20319,8 +20516,8 @@ function normalizeActionKey(actionKey2) {
   const trimmed = actionKey2.trim();
   if (trimmed.includes(":")) {
     const [method2, ...pathParts] = trimmed.split(":");
-    const path96 = pathParts.join(":").trim();
-    return `${method2?.toLowerCase()}:${path96.startsWith("/") ? path96 : `/${path96}`}`;
+    const path98 = pathParts.join(":").trim();
+    return `${method2?.toLowerCase()}:${path98.startsWith("/") ? path98 : `/${path98}`}`;
   }
   const spaceIndex = trimmed.indexOf(" ");
   if (spaceIndex <= 0) {
@@ -20329,8 +20526,8 @@ function normalizeActionKey(actionKey2) {
     );
   }
   const method = trimmed.slice(0, spaceIndex).trim().toLowerCase();
-  const path95 = trimmed.slice(spaceIndex + 1).trim();
-  return `${method}:${path95.startsWith("/") ? path95 : `/${path95}`}`;
+  const path97 = trimmed.slice(spaceIndex + 1).trim();
+  return `${method}:${path97.startsWith("/") ? path97 : `/${path97}`}`;
 }
 async function applyGatewayPublicRoutes(client, projectId, routes, options) {
   const applied = [];
@@ -20808,8 +21005,8 @@ async function upsertGatewayPlansFromManifest(client, config2, projectId, plans,
 }
 
 // src/cli/platform/helpers/openapi-gateway-servers.ts
-import { mkdir as mkdir16, readFile as readFile22, writeFile as writeFile19 } from "node:fs/promises";
-import path66 from "node:path";
+import { mkdir as mkdir16, readFile as readFile24, writeFile as writeFile19 } from "node:fs/promises";
+import path67 from "node:path";
 import YAML from "yaml";
 var GATEWAY_URL_ENV_KEY = "APITOGO_GATEWAY_URL";
 var PUBLISH_OPENAPI_RELATIVE = ".apitogo/openapi-publish.json";
@@ -20840,8 +21037,8 @@ async function resolveProjectGatewayUrl(client, projectId) {
   return null;
 }
 async function readOpenApiDocument(filePath) {
-  const content = await readFile22(filePath, "utf8");
-  const ext = path66.extname(filePath).toLowerCase();
+  const content = await readFile24(filePath, "utf8");
+  const ext = path67.extname(filePath).toLowerCase();
   const parsed = ext === ".json" ? JSON.parse(content) : YAML.parse(content);
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new Error(`OpenAPI document must be an object: ${filePath}`);
@@ -20849,13 +21046,13 @@ async function readOpenApiDocument(filePath) {
   return parsed;
 }
 async function materializePublishOpenApiWithGateway(siteDirectory, sourceOpenApiPath, gatewayUrl) {
-  const site = path66.resolve(siteDirectory);
-  const source = path66.resolve(sourceOpenApiPath);
+  const site = path67.resolve(siteDirectory);
+  const source = path67.resolve(sourceOpenApiPath);
   const relativeInput = PUBLISH_OPENAPI_RELATIVE;
-  const outputPath = path66.join(site, ...relativeInput.split("/"));
+  const outputPath = path67.join(site, ...relativeInput.split("/"));
   const doc = await readOpenApiDocument(source);
   const rewritten = withGatewayServers(doc, gatewayUrl);
-  await mkdir16(path66.dirname(outputPath), { recursive: true });
+  await mkdir16(path67.dirname(outputPath), { recursive: true });
   await writeFile19(
     outputPath,
     `${JSON.stringify(rewritten, null, 2)}
@@ -20865,11 +21062,11 @@ async function materializePublishOpenApiWithGateway(siteDirectory, sourceOpenApi
   return { outputPath, relativeInput };
 }
 async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
-  const configPath = path66.join(
-    path66.resolve(siteDirectory),
+  const configPath = path67.join(
+    path67.resolve(siteDirectory),
     APITOGO_CONFIG_FILENAME2
   );
-  const raw = await readFile22(configPath, "utf8");
+  const raw = await readFile24(configPath, "utf8");
   const config2 = JSON.parse(raw);
   const previousApis = config2.apis;
   const previousBackend = config2.backend;
@@ -20886,7 +21083,7 @@ async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
 `, "utf8");
   return {
     restore: async () => {
-      const currentRaw = await readFile22(configPath, "utf8");
+      const currentRaw = await readFile24(configPath, "utf8");
       const current = JSON.parse(currentRaw);
       if (previousApis === void 0) {
         delete current.apis;
@@ -20908,7 +21105,7 @@ async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
   };
 }
 async function prepareOpenApiServersForGatewayBuild(options) {
-  const siteDirectory = path66.resolve(options.siteDirectory);
+  const siteDirectory = path67.resolve(options.siteDirectory);
   let openApiPath = resolveBackendOpenApiPath(
     options.manifest?.backend?.openApiPath,
     {
@@ -20921,8 +21118,8 @@ async function prepareOpenApiServersForGatewayBuild(options) {
   );
   if (!openApiPath) {
     try {
-      const raw = await readFile22(
-        path66.join(siteDirectory, APITOGO_CONFIG_FILENAME2),
+      const raw = await readFile24(
+        path67.join(siteDirectory, APITOGO_CONFIG_FILENAME2),
         "utf8"
       );
       const config2 = JSON.parse(raw);
@@ -20951,8 +21148,8 @@ function normalizeActionKeyFormat(actionKey2) {
   const trimmed = actionKey2.trim();
   if (trimmed.includes(":")) {
     const [method2, ...pathParts] = trimmed.split(":");
-    const path96 = pathParts.join(":").trim();
-    return `${method2.toLowerCase()}:${path96.startsWith("/") ? path96 : `/${path96}`}`;
+    const path98 = pathParts.join(":").trim();
+    return `${method2.toLowerCase()}:${path98.startsWith("/") ? path98 : `/${path98}`}`;
   }
   const spaceIndex = trimmed.indexOf(" ");
   if (spaceIndex <= 0) {
@@ -20961,8 +21158,8 @@ function normalizeActionKeyFormat(actionKey2) {
     );
   }
   const method = trimmed.slice(0, spaceIndex).trim().toLowerCase();
-  const path95 = trimmed.slice(spaceIndex + 1).trim();
-  return `${method}:${path95.startsWith("/") ? path95 : `/${path95}`}`;
+  const path97 = trimmed.slice(spaceIndex + 1).trim();
+  return `${method}:${path97.startsWith("/") ? path97 : `/${path97}`}`;
 }
 function normalizePublicRoute(route) {
   const trimmed = route.trim();
@@ -20995,16 +21192,16 @@ function collectManifestPublicActionKeys(gateway) {
 }
 
 // src/cli/platform/helpers/publish-ledger.ts
-import { mkdir as mkdir17, readFile as readFile23, writeFile as writeFile20 } from "node:fs/promises";
-import path67 from "node:path";
+import { mkdir as mkdir17, readFile as readFile25, writeFile as writeFile20 } from "node:fs/promises";
+import path68 from "node:path";
 var PUBLISH_LEDGER_RELATIVE_PATH = ".apitogo/publish-state.json";
 function publishLedgerPath(siteDirectory) {
-  return path67.join(path67.resolve(siteDirectory), PUBLISH_LEDGER_RELATIVE_PATH);
+  return path68.join(path68.resolve(siteDirectory), PUBLISH_LEDGER_RELATIVE_PATH);
 }
 async function readPublishLedger(siteDirectory) {
   const filePath = publishLedgerPath(siteDirectory);
   try {
-    const raw = await readFile23(filePath, "utf8");
+    const raw = await readFile25(filePath, "utf8");
     const parsed = JSON.parse(raw);
     if (parsed?.version !== 1 || !Array.isArray(parsed.steps)) {
       return null;
@@ -21016,7 +21213,7 @@ async function readPublishLedger(siteDirectory) {
 }
 async function writePublishLedger(siteDirectory, ledger) {
   const filePath = publishLedgerPath(siteDirectory);
-  await mkdir17(path67.dirname(filePath), { recursive: true });
+  await mkdir17(path68.dirname(filePath), { recursive: true });
   const next = {
     ...ledger,
     version: 1,
@@ -21538,7 +21735,7 @@ async function createProjectWithWarmPoolRetry(client, body, options) {
 import { spawn as spawn3 } from "node:child_process";
 import { mkdtemp, readdir as readdir4, rm as rm9 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import path68 from "node:path";
+import path69 from "node:path";
 async function directoryHasRuntimeConfig(dir) {
   if (!await pathExists(dir)) {
     return false;
@@ -21581,20 +21778,20 @@ function runDotnetPublish(projectDir, outputDir) {
 async function findCsproj(projectDir) {
   const entries = await readdir4(projectDir);
   const csproj = entries.find((name) => name.endsWith(".csproj"));
-  return csproj ? path68.join(projectDir, csproj) : null;
+  return csproj ? path69.join(projectDir, csproj) : null;
 }
 async function prepareBackendPackagingDirectory(args) {
-  const sourceDirectory = path68.resolve(args.sourceDirectory);
+  const sourceDirectory = path69.resolve(args.sourceDirectory);
   if (args.publishDirectory?.trim()) {
     return {
-      directory: path68.resolve(args.publishDirectory),
+      directory: path69.resolve(args.publishDirectory),
       packagingMode: "published"
     };
   }
   if (await directoryHasRuntimeConfig(sourceDirectory)) {
     return { directory: sourceDirectory, packagingMode: "published" };
   }
-  const publishSubdir = path68.join(sourceDirectory, "publish");
+  const publishSubdir = path69.join(sourceDirectory, "publish");
   if (await directoryHasRuntimeConfig(publishSubdir)) {
     return { directory: publishSubdir, packagingMode: "published" };
   }
@@ -21606,9 +21803,9 @@ async function prepareBackendPackagingDirectory(args) {
     return { directory: sourceDirectory, packagingMode: "source" };
   }
   const tempRoot = await mkdtemp(
-    path68.join(tmpdir(), "apitogo-dotnet-publish-")
+    path69.join(tmpdir(), "apitogo-dotnet-publish-")
   );
-  const outputDir = path68.join(tempRoot, "publish");
+  const outputDir = path69.join(tempRoot, "publish");
   const result = await runDotnetPublish(sourceDirectory, outputDir);
   if (result.exitCode !== 0) {
     await rm9(tempRoot, { recursive: true, force: true });
@@ -21653,13 +21850,13 @@ function formatJobStatusResponse(options) {
 
 // src/cli/platform/helpers/openapi.ts
 import { promises as fs7 } from "node:fs";
-import path69 from "node:path";
+import path70 from "node:path";
 import SwaggerParser from "@apidevtools/swagger-parser";
 import YAML2 from "yaml";
 async function validateOpenApiFile(filePath) {
-  const resolved = path69.resolve(filePath);
+  const resolved = path70.resolve(filePath);
   const content = await fs7.readFile(resolved, "utf8");
-  const ext = path69.extname(resolved).toLowerCase();
+  const ext = path70.extname(resolved).toLowerCase();
   let parsed;
   try {
     parsed = ext === ".json" ? JSON.parse(content) : YAML2.parse(content);
@@ -21703,12 +21900,12 @@ async function validateOpenApiFile(filePath) {
 // src/cli/platform/helpers/zip.ts
 import { createReadStream as createReadStream2, createWriteStream as createWriteStream2, promises as fs8 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import path70 from "node:path";
+import path71 from "node:path";
 import { ZipArchive } from "archiver";
 async function packageBackendDirectory(sourceDirectory, extraExcludes = []) {
-  const resolved = path70.resolve(sourceDirectory);
+  const resolved = path71.resolve(sourceDirectory);
   const files = await collectPackageableFiles(resolved, extraExcludes);
-  const zipPath = path70.join(
+  const zipPath = path71.join(
     tmpdir2(),
     `apitogo-backend-${Date.now()}-${Math.random().toString(36).slice(2)}.zip`
   );
@@ -21720,8 +21917,8 @@ async function packageBackendDirectory(sourceDirectory, extraExcludes = []) {
     output4.on("error", reject);
     archive.pipe(output4);
     for (const rel2 of files) {
-      archive.append(createReadStream2(path70.join(resolved, rel2)), {
-        name: rel2.split(path70.sep).join("/")
+      archive.append(createReadStream2(path71.join(resolved, rel2)), {
+        name: rel2.split(path71.sep).join("/")
       });
     }
     void archive.finalize();
@@ -23272,11 +23469,11 @@ async function resolveProjectIdForPublish(client, config2, args, wait, progress,
 }
 
 // src/cli/platform/tools/dev-portal-site-build.ts
-import path74 from "node:path";
+import path75 from "node:path";
 
 // src/cli/platform/helpers/dev-portal-site-api-url.ts
-import { readdir as readdir5, readFile as readFile24, writeFile as writeFile21 } from "node:fs/promises";
-import path71 from "node:path";
+import { readdir as readdir5, readFile as readFile26, writeFile as writeFile21 } from "node:fs/promises";
+import path72 from "node:path";
 var SITE_API_BASE_URL_ENV_KEY = "VITE_APITOGO_AUTHENTICATION_API_BASE_URL";
 var PLACEHOLDER_HOST_MARKERS = [
   "dp-example.azurecontainerapps.io",
@@ -23297,10 +23494,10 @@ function isPlaceholderDevPortalApiUrl(apiBaseUrl) {
   return PLACEHOLDER_HOST_MARKERS.some((marker) => normalized.includes(marker));
 }
 async function readSiteApiBaseUrl(sourceDirectory) {
-  const resolved = path71.resolve(sourceDirectory);
+  const resolved = path72.resolve(sourceDirectory);
   for (const envFile of [".env", ".env.production"]) {
     try {
-      const content = await readFile24(path71.join(resolved, envFile), "utf8");
+      const content = await readFile26(path72.join(resolved, envFile), "utf8");
       const lines = [...content.matchAll(ENV_LINE_GLOBAL_RE)];
       if (lines.length === 0) {
         continue;
@@ -23325,13 +23522,13 @@ async function readSiteApiBaseUrl(sourceDirectory) {
   return null;
 }
 async function patchSiteApiBaseUrl(sourceDirectory, apiBaseUrl) {
-  const resolved = path71.resolve(sourceDirectory);
+  const resolved = path72.resolve(sourceDirectory);
   const line2 = `${SITE_API_BASE_URL_ENV_KEY}=${apiBaseUrl}`;
   let patchedExisting = false;
   for (const envFile of [".env.production", ".env"]) {
-    const envPath = path71.join(resolved, envFile);
+    const envPath = path72.join(resolved, envFile);
     try {
-      const content = await readFile24(envPath, "utf8");
+      const content = await readFile26(envPath, "utf8");
       const withoutAssignments = content.replace(ENV_LINE_GLOBAL_RE, "").replace(/\n{3,}/g, "\n\n").trimEnd();
       const patched = withoutAssignments ? `${withoutAssignments}
 ${line2}
@@ -23343,7 +23540,7 @@ ${line2}
     }
   }
   if (!patchedExisting) {
-    await writeFile21(path71.join(resolved, ".env"), `${line2}
+    await writeFile21(path72.join(resolved, ".env"), `${line2}
 `);
   }
 }
@@ -23351,7 +23548,7 @@ function tryProjectId(explicit, manifestProjectId, config2) {
   return explicit?.trim() || manifestProjectId?.trim() || config2.defaultProjectId?.trim() || void 0;
 }
 async function ensureLiveSiteApiBaseUrlForBuild(_client, config2, args, resolveFromProject) {
-  const sourceDirectory = path71.resolve(args.sourceDirectory);
+  const sourceDirectory = path72.resolve(args.sourceDirectory);
   const explicit = args.apiBaseUrl?.trim();
   if (explicit && !isPlaceholderDevPortalApiUrl(explicit)) {
     await patchSiteApiBaseUrl(sourceDirectory, explicit);
@@ -23387,7 +23584,7 @@ async function* walkFiles(root) {
     return;
   }
   for (const entry of entries) {
-    const full = path71.join(root, entry.name);
+    const full = path72.join(root, entry.name);
     if (entry.isDirectory()) {
       if (entry.name === "node_modules" || entry.name === ".git") {
         continue;
@@ -23399,8 +23596,8 @@ async function* walkFiles(root) {
   }
 }
 async function assertDeployableDistHasLiveApiBaseUrl(distDirectory, expectedApiBaseUrl) {
-  const dist = path71.resolve(distDirectory);
-  const siteRoot = path71.dirname(dist);
+  const dist = path72.resolve(distDirectory);
+  const siteRoot = path72.dirname(dist);
   const fromEnv = expectedApiBaseUrl?.trim() || await readSiteApiBaseUrl(siteRoot) || await readSiteApiBaseUrl(dist);
   if (!fromEnv || isPlaceholderDevPortalApiUrl(fromEnv)) {
     throw new Error(
@@ -23411,7 +23608,7 @@ async function assertDeployableDistHasLiveApiBaseUrl(distDirectory, expectedApiB
   let found = false;
   let foundPlaceholder = false;
   for await (const file of walkFiles(dist)) {
-    const content = await readFile24(file, "utf8");
+    const content = await readFile26(file, "utf8");
     if (content.includes(needle)) {
       found = true;
     }
@@ -23436,7 +23633,7 @@ async function assertDeployableDistHasLiveApiBaseUrl(distDirectory, expectedApiB
 
 // src/cli/platform/tools/dev-portal.ts
 import { promises as fs10 } from "node:fs";
-import path73 from "node:path";
+import path74 from "node:path";
 
 // src/cli/platform/helpers/dev-portal-backend-job.ts
 var DEV_PORTAL_BACKEND_UPDATE_RESOURCE_TYPE = "DevPortalBackendUpdate";
@@ -23546,7 +23743,7 @@ async function snapshotBackendUpdateJobIds(client, projectId) {
 // src/cli/platform/helpers/tarball.ts
 import { createReadStream as createReadStream3, createWriteStream as createWriteStream3, promises as fs9 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import path72 from "node:path";
+import path73 from "node:path";
 import { TarArchive } from "archiver";
 var DEV_PORTAL_DEPLOY_ARCHIVE_ROOT = "dist";
 function normalizeArchiveRoot(archiveRoot) {
@@ -23557,10 +23754,10 @@ function normalizeArchiveRoot(archiveRoot) {
   return `${trimmed}/`;
 }
 async function packageDirectoryAsTarGz(sourceDirectory, options) {
-  const resolved = path72.resolve(sourceDirectory);
+  const resolved = path73.resolve(sourceDirectory);
   const files = await collectPackageableFiles(resolved);
   const entryPrefix = options?.archiveRoot ? normalizeArchiveRoot(options.archiveRoot) : "";
-  const archivePath = path72.join(
+  const archivePath = path73.join(
     tmpdir3(),
     `apitogo-docs-${Date.now()}-${Math.random().toString(36).slice(2)}.tgz`
   );
@@ -23572,8 +23769,8 @@ async function packageDirectoryAsTarGz(sourceDirectory, options) {
     output4.on("error", reject);
     archive.pipe(output4);
     for (const rel2 of files) {
-      const entryName = entryPrefix + rel2.split(path72.sep).join("/");
-      archive.append(createReadStream3(path72.join(resolved, rel2)), {
+      const entryName = entryPrefix + rel2.split(path73.sep).join("/");
+      archive.append(createReadStream3(path73.join(resolved, rel2)), {
         name: entryName
       });
     }
@@ -23815,7 +24012,7 @@ function validateDeployArchiveInput(args) {
 async function resolveDevPortalArchive(args) {
   validateDeployArchiveInput(args);
   if (args.archivePath?.trim()) {
-    const archivePath = path73.resolve(args.archivePath.trim());
+    const archivePath = path74.resolve(args.archivePath.trim());
     const stat7 = await fs10.stat(archivePath).catch(() => null);
     if (!stat7?.isFile()) {
       throw new Error(`archivePath is not a file: ${archivePath}`);
@@ -23880,7 +24077,7 @@ async function handleDeployDevPortal(client, config2, args, progress) {
 // src/cli/platform/tools/dev-portal-site-build.ts
 async function handleBuildDevPortalSite(client, config2, args, progress) {
   const buildProgress = progress?.child("Build dev portal site");
-  const sourceDirectory = path74.resolve(args.sourceDirectory);
+  const sourceDirectory = path75.resolve(args.sourceDirectory);
   await buildProgress?.onStep("Ensuring live portal API URL");
   const apiBaseUrl = await ensureLiveSiteApiBaseUrlForBuild(
     client,
@@ -25386,7 +25583,7 @@ function resultLooksFailed(payload) {
   return parsed.status === "failed" || parsed.status === "blocked";
 }
 async function apply(argv) {
-  const sourceDirectory = path75.resolve(process.cwd(), argv.dir);
+  const sourceDirectory = path76.resolve(process.cwd(), argv.dir);
   let config2;
   try {
     config2 = loadConfig();
@@ -25456,7 +25653,7 @@ async function apply(argv) {
   if (canPromptInteractively && parsed?.status === "blocked" && parsed.reason === "project_not_found") {
     const resolution = await resolveProjectNotFoundInteractively(
       parsed,
-      path75.basename(sourceDirectory)
+      path76.basename(sourceDirectory)
     );
     if (resolution) {
       effectiveProjectId = void 0;
@@ -25476,7 +25673,7 @@ async function apply(argv) {
   while (canPromptInteractively && parsed?.status === "blocked" && parsed.reason === "project_name_exists") {
     const resolution = await resolveProjectNameExistsInteractively(
       parsed,
-      effectiveProjectName ?? path75.basename(sourceDirectory)
+      effectiveProjectName ?? path76.basename(sourceDirectory)
     );
     if (!resolution) {
       break;
@@ -25547,11 +25744,11 @@ async function apply(argv) {
 }
 
 // src/cli/deploy/command.ts
-import path79 from "node:path";
+import path81 from "node:path";
 init_invariant();
 
 // src/cli/project/create-handler.ts
-import path76 from "node:path";
+import path77 from "node:path";
 import open2 from "open";
 init_invariant();
 
@@ -25855,7 +26052,7 @@ async function createLinkedProject(argv, dir, options = {}) {
   }
 }
 async function createProject2(argv) {
-  const dir = path76.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path77.resolve(process.cwd(), argv.dir ?? ".");
   if (await isConfigV2(dir)) {
     await createLinkedProject(argv, dir);
     return;
@@ -25914,17 +26111,129 @@ async function createProject2(argv) {
   }
 }
 
+// src/cli/secrets/input.ts
+import { createInterface as createInterface6 } from "node:readline/promises";
+var CTRL_C = "";
+var CTRL_D = "";
+function readHidden(prompt, input5 = process.stdin, output4 = process.stdout) {
+  return new Promise((resolve, reject) => {
+    if (!input5.isTTY || !input5.setRawMode) {
+      reject(new Error("A hidden prompt needs an interactive terminal."));
+      return;
+    }
+    let value = "";
+    output4.write(prompt);
+    input5.setRawMode(true);
+    input5.resume();
+    const finish = (action) => {
+      input5.removeListener("data", onData);
+      input5.setRawMode?.(false);
+      input5.pause();
+      output4.write("\n");
+      action();
+    };
+    const onData = (chunk) => {
+      for (const char of chunk.toString("utf8")) {
+        if (char === CTRL_C)
+          return finish(() => reject(new Error("Cancelled.")));
+        if (char === "\r" || char === "\n" || char === CTRL_D)
+          return finish(() => resolve(value));
+        if (char === "\x7F" || char === "\b") value = value.slice(0, -1);
+        else value += char;
+      }
+    };
+    input5.on("data", onData);
+  });
+}
+async function readStdin(input5 = process.stdin) {
+  const chunks = [];
+  for await (const chunk of input5) {
+    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+  }
+  return Buffer.concat(chunks).toString("utf8").replace(/\r?\n$/, "");
+}
+async function confirm(question) {
+  const rl = createInterface6({ input: process.stdin, output: process.stdout });
+  try {
+    const answer = (await rl.question(question)).trim().toLowerCase();
+    return answer === "y" || answer === "yes";
+  } finally {
+    rl.close();
+  }
+}
+
+// src/cli/deploy/stripe-key.ts
+import path78 from "node:path";
+init_invariant();
+var StripeKeyError = class extends ApitogoError {
+  constructor(message, developerHint) {
+    super(message, { developerHint, title: "Stripe key needed" });
+    this.name = "StripeKeyError";
+  }
+};
+var STRIPE_KEY = /^(sk|rk)_(test|live)_[A-Za-z0-9]+$/;
+var wantsPlans = (only) => {
+  if (only === void 0) return true;
+  const names = (Array.isArray(only) ? only : only.split(",")).map((name) => name.trim()).filter(Boolean);
+  return names.length === 0 || names.includes("plans");
+};
+async function ensureStripeKey(argv, deps) {
+  if (!wantsPlans(argv.only)) return { status: "not-needed" };
+  let resolved;
+  try {
+    resolved = loadConfigV2(path78.resolve(process.cwd(), argv.dir)).resolved;
+  } catch {
+    return { status: "not-needed" };
+  }
+  if (!resolved.plans?.enabled || resolved.plans.billing.provider !== "stripe")
+    return { status: "not-needed" };
+  const paid = await paidPlanSkus(resolved);
+  if (paid.length === 0) return { status: "not-needed" };
+  const projectId = argv.projectId?.trim() || resolved.project.id || deps.envProjectId?.trim();
+  if (!projectId) return { status: "not-needed" };
+  const name = stripeKeySecretName(resolved);
+  const client = deps.client();
+  const { secrets: secrets2 } = await client.listSecrets(projectId);
+  if (secrets2.some((secret) => secret.name === name))
+    return { status: "present", name };
+  const reason = `The plan${paid.length > 1 ? "s" : ""} ${paid.join(", ")} ${paid.length > 1 ? "have" : "has"} a price, so payments go through Stripe, and this project has no Stripe key yet.`;
+  if (!deps.interactive) {
+    throw new StripeKeyError(
+      reason,
+      `Store it with \`apitogo secrets set ${name}\`, then deploy again. Or make the plans free.`
+    );
+  }
+  deps.print(reason);
+  deps.print(
+    "Paste your Stripe secret key (starts with sk_ or rk_; use an sk_test_ key to try it out). It is stored as a project secret, not in your files."
+  );
+  const key = (await deps.askHidden("Stripe secret key (hidden): ")).trim();
+  if (!key)
+    throw new StripeKeyError(
+      "No key was entered. Nothing was deployed.",
+      `Run \`apitogo secrets set ${name}\` when you have it, then deploy again.`
+    );
+  if (!STRIPE_KEY.test(key))
+    throw new StripeKeyError(
+      "That is not a Stripe secret key. Nothing was deployed.",
+      "A Stripe secret key starts with sk_test_, sk_live_, rk_test_ or rk_live_. Find it in Stripe under Developers > API keys."
+    );
+  await client.setSecret(projectId, name, key);
+  deps.print(`Stripe key saved as the project secret ${name}.`);
+  return { status: "saved", name };
+}
+
 // src/cli/deploy/v2.ts
 import { rm as rm10 } from "node:fs/promises";
 init_invariant();
 
 // src/cli/portal/report.ts
 import { access as access9 } from "node:fs/promises";
-import path77 from "node:path";
+import path79 from "node:path";
 
 // src/cli/deploy/gateway.ts
 import { createHash as createHash4 } from "node:crypto";
-import { readFile as readFile25 } from "node:fs/promises";
+import { readFile as readFile27 } from "node:fs/promises";
 init_invariant();
 var GatewayDeployError = class extends ApitogoError {
   constructor(code, message, developerHint) {
@@ -25962,7 +26271,7 @@ async function readSpec(gateway) {
       "Add one to gateway.specs in the config."
     );
   try {
-    return await readFile25(file);
+    return await readFile27(file);
   } catch {
     throw new GatewayDeployError(
       "GATEWAY_SPEC_UNREADABLE",
@@ -26722,12 +27031,13 @@ async function plansInputs(resolved, projectId) {
   const plans = resolved.plans;
   if (!plans) throw new Error("plans is not in the config.");
   const billing = plans.billing;
-  const wanted = toPlatformPlans(await readPlansFile(plans.file), {
+  const filePlans = await readPlansFile(plans.file);
+  const wanted = toPlatformPlans(filePlans, {
     billing: billing.provider === "stripe"
   });
   const manifest = await readManifest(resolved.state);
   const ledger = await readLedger(resolved.state);
-  const billingOn = billing.provider === "stripe";
+  const billingOn = billing.provider === "stripe" && filePlans.some((plan2) => isPaidPlan(plan2));
   const billingStep = billingOn || stepOf(ledger, "plans", "billing") !== void 0;
   const identity = manifest?.services.identity;
   const ownIdentity = Boolean(
@@ -26739,11 +27049,12 @@ async function plansInputs(resolved, projectId) {
     ownIdentity,
     catalogHash: stableJson({ projectId, plans: wanted }),
     backendHash: stableJson({ projectId }),
+    billingOn,
     billingStep,
     // Only the references to the project's secrets: a rotated value is applied with --force.
     billingHash: stableJson({
       projectId,
-      provider: billing.provider,
+      provider: billingOn ? "stripe" : "none",
       apiKey: billingOn ? billing.apiKey : void 0,
       webhookSecret: billingOn ? billing.webhookSecret : void 0,
       successUrl: billingOn ? billing.successUrl : void 0,
@@ -26809,6 +27120,7 @@ async function deployPlans(resolved, projectId, deps, options = {}) {
     wanted,
     manifest,
     ownIdentity,
+    billingOn,
     billingStep,
     billingHash,
     catalogHash,
@@ -26968,7 +27280,7 @@ async function deployPlans(resolved, projectId, deps, options = {}) {
     name: "billing",
     hash: () => billingHash,
     run: async () => {
-      const body = plans.billing.provider === "stripe" ? {
+      const body = billingOn ? {
         provider: "stripe",
         apiKey: plans.billing.apiKey,
         webhookSecret: plans.billing.webhookSecret,
@@ -26985,8 +27297,7 @@ async function deployPlans(resolved, projectId, deps, options = {}) {
         code: "PLANS_BILLING",
         text: "the billing settings"
       });
-      if (plans.billing.provider === "stripe")
-        billingNote = billingNotes(queued);
+      if (billingOn) billingNote = billingNotes(queued);
       return { ...done, mode: queued.mode };
     }
   };
@@ -27029,9 +27340,9 @@ async function deployPlans(resolved, projectId, deps, options = {}) {
           projectId,
           projectName: resolved.project.name,
           apiBaseUrl,
-          billing: plans.billing.provider,
+          billing: billingOn ? "stripe" : "none",
           catalogRevision: catalog && !catalog.skipped ? previous + 1 : Math.max(previous, 1),
-          capabilities: plans.billing.provider === "stripe" ? { ...PLANS_CAPABILITIES, checkout: true } : PLANS_CAPABILITIES
+          capabilities: billingOn ? { ...PLANS_CAPABILITIES, checkout: true } : PLANS_CAPABILITIES
         })
       );
     }
@@ -27190,7 +27501,7 @@ async function planPlansService(resolved, ledger, plansRemote2) {
     ),
     inputs.ownIdentity ? "sign-in: the project's identity will be applied to the plans backend" : "sign-in: no identity of the platform deployed, so nothing is applied to the plans backend",
     ...inputs.billingStep ? [
-      resolved.plans?.billing.provider === "stripe" ? "billing: the Stripe key and webhook secret of the project's secrets will be applied to the plans backend" : "billing: switched off, so the stored Stripe settings will be removed from the plans backend"
+      inputs.billingOn ? "billing: a plan has a price, so the Stripe key and webhook secret of the project's secrets will be applied to the plans backend" : "billing: no plan has a price, so the stored Stripe settings will be removed from the plans backend"
     ] : [],
     ...steps.map(
       (name) => `step ${name}: ${stepState(stepOf(ledger, "plans", name), hashes[name])}`
@@ -27384,7 +27695,7 @@ async function planPortalService(resolved, ledger) {
     const hash2 = await portalBuildHash(resolved, prepared);
     const previous = stepOf(ledger, "portal", "build");
     const built = await exists5(
-      path77.join(resolved.state.buildDir, "index.html")
+      path79.join(resolved.state.buildDir, "index.html")
     );
     if (previous?.status === "succeeded" && previous.hash === hash2 && built) {
       return {
@@ -27743,7 +28054,7 @@ async function statusV2(dir, only, options = {}) {
     if (service === "portal") {
       const build2 = stepOf(ledger, "portal", "build");
       const built = await exists5(
-        path77.join(resolved.state.buildDir, "index.html")
+        path79.join(resolved.state.buildDir, "index.html")
       );
       const state = build2?.status === "failed" ? "build-failed" : build2?.status === "succeeded" && built ? "built" : "not-built";
       services.push({
@@ -27754,7 +28065,7 @@ async function statusV2(dir, only, options = {}) {
           ...build2?.finishedAt ? [`last build: ${build2.finishedAt}`] : [],
           ...build2?.status === "failed" ? [`error: ${build2.error ?? "unknown"}`] : [],
           ...state === "built" ? [
-            `output: ${path77.relative(resolved.configDir, resolved.state.buildDir)}`
+            `output: ${path79.relative(resolved.configDir, resolved.state.buildDir)}`
           ] : [],
           ...url2 ? [`url: ${url2}`] : ["url: not known (portal is not deployed yet)"],
           ...await hostingLine(resolved, manifest, options.hostingRemote)
@@ -27821,7 +28132,7 @@ function formatStatus(output4) {
 
 // src/cli/deploy/static-web-config.ts
 import { access as access10, writeFile as writeFile22 } from "node:fs/promises";
-import path78 from "node:path";
+import path80 from "node:path";
 var STATIC_WEB_CONFIG_FILE = "staticwebapp.config.json";
 var STATIC_WEB_CONFIG_VERSION = 3;
 var CLIENT_ONLY_ROUTES = [
@@ -27839,7 +28150,7 @@ var DEFAULT_STATIC_WEB_CONFIG = {
   }
 };
 async function ensureStaticWebConfig(buildDir) {
-  const file = path78.join(buildDir, STATIC_WEB_CONFIG_FILE);
+  const file = path80.join(buildDir, STATIC_WEB_CONFIG_FILE);
   try {
     await access10(file);
     return false;
@@ -28190,7 +28501,7 @@ function formatDeploy(output4) {
 // src/cli/deploy/command.ts
 async function ensureLinkedProject(argv, deps) {
   if (argv.projectId?.trim() || deps.envProjectId?.trim()) return true;
-  const dir = path79.resolve(process.cwd(), argv.dir);
+  const dir = path81.resolve(process.cwd(), argv.dir);
   let linked;
   try {
     linked = Boolean(loadConfigV2(dir).resolved.project.id);
@@ -28220,6 +28531,18 @@ async function deployProject(argv) {
     createProject: (dir) => createLinkedProject({ dir }, dir, { continuingDeploy: true })
   });
   if (!ready) return;
+  try {
+    await ensureStripeKey(argv, {
+      client: () => new PlatformApiClient(loadConfig()),
+      envProjectId: process.env.APITOGO_DEFAULT_PROJECT_ID,
+      interactive,
+      askHidden: (prompt) => readHidden(prompt),
+      print: printDiagnosticsToConsole
+    });
+  } catch (error) {
+    await reportFailure(error, json);
+    return;
+  }
   const quiet = json || argv.verbose !== true;
   if (quiet) applyJsonOnlyDeployQuietMode();
   if (!json && quiet)
@@ -28230,7 +28553,7 @@ async function deployProject(argv) {
     const config2 = loadConfig();
     const output4 = await deployV2(
       {
-        dir: path79.resolve(process.cwd(), argv.dir),
+        dir: path81.resolve(process.cwd(), argv.dir),
         only: Array.isArray(argv.only) ? argv.only.join(",") : argv.only,
         projectId: argv.projectId,
         env: argv.env,
@@ -28250,23 +28573,26 @@ async function deployProject(argv) {
     for (const line2 of formatDeploy(output4)) printDiagnosticsToConsole(line2);
     printResultToConsole("Deploy finished.");
   } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    const hint = error instanceof ApitogoError ? error.developerHint : void 0;
-    if (json) {
-      console.log(
-        JSON.stringify({
-          status: "failed",
-          error: message,
-          hint: hint ?? null
-        })
-      );
-      process.exitCode = 1;
-      return;
-    }
-    await printCriticalFailureToConsoleAndExit(
-      hint ? `${message} ${hint}` : message
+    await reportFailure(error, json);
+  }
+}
+async function reportFailure(error, json) {
+  const message = error instanceof Error ? error.message : String(error);
+  const hint = error instanceof ApitogoError ? error.developerHint : void 0;
+  if (json) {
+    console.log(
+      JSON.stringify({
+        status: "failed",
+        error: message,
+        hint: hint ?? null
+      })
     );
+    process.exitCode = 1;
+    return;
   }
+  await printCriticalFailureToConsoleAndExit(
+    hint ? `${message} ${hint}` : message
+  );
 }
 
 // src/cli/cmds/deploy.ts
@@ -28321,7 +28647,7 @@ var deploy_default = {
   }),
   handler: async (argv) => {
     await captureEvent({ argv, event: "apitogo deploy" });
-    if (await isConfigV2(path80.resolve(process.cwd(), argv.dir))) {
+    if (await isConfigV2(path82.resolve(process.cwd(), argv.dir))) {
       await deployProject(argv);
       return;
     }
@@ -28331,7 +28657,7 @@ var deploy_default = {
 
 // src/cli/export/handler.ts
 import { mkdir as mkdir18, writeFile as writeFile23 } from "node:fs/promises";
-import path81 from "node:path";
+import path83 from "node:path";
 init_invariant();
 var ExportError = class extends ApitogoError {
   constructor(message, developerHint) {
@@ -28345,7 +28671,7 @@ async function exportOpenApi(args, deps) {
       `Cannot export "${args.target}".`,
       "Only `apitogo export openapi` exists."
     );
-  const dir = path81.resolve(process.cwd(), args.dir ?? ".");
+  const dir = path83.resolve(process.cwd(), args.dir ?? ".");
   if (!await isConfigV2(dir))
     throw new ExportError(
       "This command needs a config version 2 project.",
@@ -28370,8 +28696,8 @@ async function exportOpenApi(args, deps) {
     throw error;
   }
   if (!args.out) return { text };
-  const file = path81.resolve(process.cwd(), args.out);
-  await mkdir18(path81.dirname(file), { recursive: true });
+  const file = path83.resolve(process.cwd(), args.out);
+  await mkdir18(path83.dirname(file), { recursive: true });
   await writeFile23(file, text);
   return { text, file };
 }
@@ -28464,8 +28790,8 @@ import open3 from "open";
 import colors14 from "picocolors";
 
 // src/cli/platform/device-auth.ts
-function url(apiUrl, path95) {
-  return `${apiUrl}${path95.startsWith("/") ? path95 : `/${path95}`}`;
+function url(apiUrl, path97) {
+  return `${apiUrl}${path97.startsWith("/") ? path97 : `/${path97}`}`;
 }
 async function requestDeviceCode(apiUrl) {
   const response = await fetchWithRetry(
@@ -28647,7 +28973,7 @@ var logout_default = {
 };
 
 // src/cli/portal/commands.ts
-import path82 from "node:path";
+import path84 from "node:path";
 init_invariant();
 function parseOnly(value) {
   if (value === void 0) return void 0;
@@ -28664,7 +28990,7 @@ function parseOnly(value) {
 async function run2(command2, argv, compute, format) {
   const json = argv.json === true;
   try {
-    const dir = path82.resolve(process.cwd(), argv.dir ?? ".");
+    const dir = path84.resolve(process.cwd(), argv.dir ?? ".");
     if (!await isConfigV2(dir)) {
       throw new ServiceEditError(
         `${command2} works with a config version 2 project, and there is none in ${dir}.`,
@@ -28880,14 +29206,14 @@ var remove_default = {
 
 // src/cli/dev/handler.ts
 init_joinUrl();
-import path85 from "node:path";
+import path87 from "node:path";
 
 // src/vite/dev-server.ts
 init_logger();
 import fs11 from "node:fs/promises";
 import http from "node:http";
 import https from "node:https";
-import path84 from "node:path";
+import path86 from "node:path";
 import { createHttpTerminator } from "http-terminator";
 import {
   createServer as createViteServer,
@@ -28920,7 +29246,7 @@ init_loader();
 // src/vite/pagefind-dev-index.ts
 init_invariant();
 init_joinUrl();
-import path83 from "node:path";
+import path85 from "node:path";
 import { createIndex as createIndex2 } from "pagefind";
 import { isRunnableDevEnvironment } from "vite";
 async function* buildPagefindDevIndex(vite, config2) {
@@ -28973,7 +29299,7 @@ async function* buildPagefindDevIndex(vite, config2) {
       path: urlPath
     };
   }
-  const outputPath = path83.join(vite.config.publicDir, "pagefind");
+  const outputPath = path85.join(vite.config.publicDir, "pagefind");
   await pagefindIndex.writeFiles({ outputPath });
   yield { type: "complete", success: true, indexed };
 }
@@ -28992,9 +29318,9 @@ var DevServer = class {
     this.protocol = "https";
     const { dir } = this.options;
     const [key, cert, ca] = await Promise.all([
-      fs11.readFile(path84.resolve(dir, config2.https.key)),
-      fs11.readFile(path84.resolve(dir, config2.https.cert)),
-      config2.https.ca ? fs11.readFile(path84.resolve(dir, config2.https.ca)) : void 0
+      fs11.readFile(path86.resolve(dir, config2.https.key)),
+      fs11.readFile(path86.resolve(dir, config2.https.cert)),
+      config2.https.ca ? fs11.readFile(path86.resolve(dir, config2.https.ca)) : void 0
     ]);
     return https.createServer({ key, cert, ca });
   }
@@ -29011,7 +29337,7 @@ var DevServer = class {
     );
     const server = await this.createNodeServer(config2);
     if (config2.search?.type === "pagefind" && viteConfig.publicDir !== false) {
-      const publicRoot = path84.resolve(
+      const publicRoot = path86.resolve(
         this.options.dir,
         typeof viteConfig.publicDir === "string" ? viteConfig.publicDir : "public"
       );
@@ -29028,7 +29354,7 @@ var DevServer = class {
           // built-in transform middleware which would treat the path as a static asset.
           name: "apitogo:entry-client",
           configureServer(server2) {
-            const entryPath = path84.posix.join(
+            const entryPath = path86.posix.join(
               server2.config.base,
               "/__z/entry.client.tsx"
             );
@@ -29193,7 +29519,7 @@ init_package_json();
 async function dev(argv) {
   const packageJson3 = getZudokuPackageJson();
   process.env.NODE_ENV = "development";
-  let dir = path85.resolve(process.cwd(), argv.dir);
+  let dir = path87.resolve(process.cwd(), argv.dir);
   if (await isConfigV2(dir)) {
     const { root, prepared } = await preparePortalWorkspace(dir, "development");
     dir = root;
@@ -29292,61 +29618,8 @@ var run_default = {
 };
 
 // src/cli/secrets/handler.ts
-import path86 from "node:path";
+import path88 from "node:path";
 init_invariant();
-
-// src/cli/secrets/input.ts
-import { createInterface as createInterface6 } from "node:readline/promises";
-var CTRL_C = "";
-var CTRL_D = "";
-function readHidden(prompt, input5 = process.stdin, output4 = process.stdout) {
-  return new Promise((resolve, reject) => {
-    if (!input5.isTTY || !input5.setRawMode) {
-      reject(new Error("A hidden prompt needs an interactive terminal."));
-      return;
-    }
-    let value = "";
-    output4.write(prompt);
-    input5.setRawMode(true);
-    input5.resume();
-    const finish = (action) => {
-      input5.removeListener("data", onData);
-      input5.setRawMode?.(false);
-      input5.pause();
-      output4.write("\n");
-      action();
-    };
-    const onData = (chunk) => {
-      for (const char of chunk.toString("utf8")) {
-        if (char === CTRL_C)
-          return finish(() => reject(new Error("Cancelled.")));
-        if (char === "\r" || char === "\n" || char === CTRL_D)
-          return finish(() => resolve(value));
-        if (char === "\x7F" || char === "\b") value = value.slice(0, -1);
-        else value += char;
-      }
-    };
-    input5.on("data", onData);
-  });
-}
-async function readStdin(input5 = process.stdin) {
-  const chunks = [];
-  for await (const chunk of input5) {
-    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
-  }
-  return Buffer.concat(chunks).toString("utf8").replace(/\r?\n$/, "");
-}
-async function confirm(question) {
-  const rl = createInterface6({ input: process.stdin, output: process.stdout });
-  try {
-    const answer = (await rl.question(question)).trim().toLowerCase();
-    return answer === "y" || answer === "yes";
-  } finally {
-    rl.close();
-  }
-}
-
-// src/cli/secrets/handler.ts
 var SECRET_NAME = /^[A-Za-z_][A-Za-z0-9_]{0,127}$/;
 var SecretsError = class extends ApitogoError {
   constructor(message, developerHint) {
@@ -29357,7 +29630,7 @@ var SecretsError = class extends ApitogoError {
 async function resolveProjectId2(argv, deps) {
   const explicit = argv.projectId?.trim();
   if (explicit) return explicit;
-  const dir = path86.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path88.resolve(process.cwd(), argv.dir ?? ".");
   if (await isConfigV2(dir)) {
     const id = loadConfigV2(dir).resolved.project.id;
     if (id) return id;
@@ -29517,12 +29790,12 @@ var secrets_default = {
 };
 
 // src/cli/cmds/status.ts
-import path88 from "node:path";
+import path90 from "node:path";
 
 // src/cli/status/handler.ts
-import path87 from "node:path";
+import path89 from "node:path";
 async function status(argv) {
-  const sourceDirectory = path87.resolve(process.cwd(), argv.dir);
+  const sourceDirectory = path89.resolve(process.cwd(), argv.dir);
   let config2;
   try {
     config2 = loadConfig();
@@ -29620,7 +29893,7 @@ var status_default = {
   }),
   handler: async (argv) => {
     await captureEvent({ argv, event: "apitogo status" });
-    if (await isConfigV2(path88.resolve(process.cwd(), argv.dir))) {
+    if (await isConfigV2(path90.resolve(process.cwd(), argv.dir))) {
       await statusOfProject(argv);
       return;
     }
@@ -29629,11 +29902,11 @@ var status_default = {
 };
 
 // src/cli/cmds/teardown.ts
-import path91 from "node:path";
+import path93 from "node:path";
 
 // src/cli/teardown/command.ts
 init_invariant();
-import path89 from "node:path";
+import path91 from "node:path";
 import { createInterface as createInterface7 } from "node:readline/promises";
 
 // src/cli/teardown/v2.ts
@@ -29994,7 +30267,7 @@ async function teardownProject(argv) {
     const progress = createConsoleProgressReporter();
     const result = await teardownV2(
       {
-        dir: path89.resolve(process.cwd(), argv.dir),
+        dir: path91.resolve(process.cwd(), argv.dir),
         projectId: argv.projectId,
         only: Array.isArray(argv.only) ? argv.only.join(",") : argv.only,
         yes: argv.yes === true,
@@ -30053,7 +30326,7 @@ async function teardownProject(argv) {
 }
 
 // src/cli/teardown/handler.ts
-import path90 from "node:path";
+import path92 from "node:path";
 function resultLooksFailed3(payload) {
   try {
     const parsed = JSON.parse(payload);
@@ -30069,7 +30342,7 @@ async function teardown(argv) {
     );
     return;
   }
-  const sourceDirectory = path90.resolve(process.cwd(), argv.dir);
+  const sourceDirectory = path92.resolve(process.cwd(), argv.dir);
   let config2;
   try {
     config2 = loadConfig();
@@ -30147,7 +30420,7 @@ var teardown_default = {
   }),
   handler: async (argv) => {
     await captureEvent({ argv, event: "apitogo teardown" });
-    if (await isConfigV2(path91.resolve(process.cwd(), argv.dir))) {
+    if (await isConfigV2(path93.resolve(process.cwd(), argv.dir))) {
       await teardownProject(argv);
       return;
     }
@@ -30157,7 +30430,7 @@ var teardown_default = {
 
 // src/cli/teardown/reset-command.ts
 init_invariant();
-import path92 from "node:path";
+import path94 from "node:path";
 
 // src/cli/teardown/reset.ts
 init_invariant();
@@ -30280,7 +30553,7 @@ async function resetProject(argv) {
     const config2 = loadConfig();
     const result = await resetProjectV2(
       {
-        dir: path92.resolve(process.cwd(), argv.dir),
+        dir: path94.resolve(process.cwd(), argv.dir),
         projectId: argv.projectId,
         yes: argv.yes === true
       },
@@ -30344,7 +30617,7 @@ var test_reset_default = {
 };
 
 // src/cli/test-sign-in/handler.ts
-import path93 from "node:path";
+import path95 from "node:path";
 init_invariant();
 var TestSignInError = class extends ApitogoError {
   constructor(message, developerHint) {
@@ -30355,7 +30628,7 @@ var TestSignInError = class extends ApitogoError {
 async function resolveProjectId3(argv) {
   const explicit = argv.projectId?.trim();
   if (explicit) return explicit;
-  const dir = path93.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path95.resolve(process.cwd(), argv.dir ?? ".");
   if (await isConfigV2(dir)) {
     const id = loadConfigV2(dir).resolved.project.id;
     if (id) return id;
@@ -30495,36 +30768,36 @@ function createApitogoCli(argv) {
 // src/cli/local-handoff.ts
 import { spawn as spawn4 } from "node:child_process";
 import { existsSync as existsSync8, realpathSync as realpathSync2 } from "node:fs";
-import path94 from "node:path";
+import path96 from "node:path";
 var LOCAL_HANDOFF_ENV = "APITOGO_LOCAL_CLI";
 var PACKAGE_NAME = "@lukoweb/apitogo";
 var resolveProjectDir = (argv, cwd) => {
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
     const next = argv[i + 1];
-    if (arg === "--dir" && next) return path94.resolve(cwd, next);
+    if (arg === "--dir" && next) return path96.resolve(cwd, next);
     if (arg?.startsWith("--dir=")) {
-      return path94.resolve(cwd, arg.slice("--dir=".length));
+      return path96.resolve(cwd, arg.slice("--dir=".length));
     }
   }
   return cwd;
 };
 var findLocalCli = (projectDir, runningRoot) => {
-  let dir = path94.resolve(projectDir);
+  let dir = path96.resolve(projectDir);
   let localPackageRoot;
   while (!localPackageRoot) {
-    const candidate = path94.join(dir, "node_modules", PACKAGE_NAME);
-    if (existsSync8(path94.join(candidate, "package.json"))) {
+    const candidate = path96.join(dir, "node_modules", PACKAGE_NAME);
+    if (existsSync8(path96.join(candidate, "package.json"))) {
       localPackageRoot = candidate;
-    } else if (dir === path94.dirname(dir)) {
+    } else if (dir === path96.dirname(dir)) {
       return void 0;
     } else {
-      dir = path94.dirname(dir);
+      dir = path96.dirname(dir);
     }
   }
   const localRoot = realpathSync2(localPackageRoot);
   if (localRoot === realpathSync2(runningRoot)) return void 0;
-  return path94.join(localRoot, "cli.js");
+  return path96.join(localRoot, "cli.js");
 };
 var handoffToLocalCli = async (argv, runningRoot) => {
   if (process.env[LOCAL_HANDOFF_ENV] || process.env.ZUDOKU_ENV === "internal") {
@@ -30536,7 +30809,7 @@ var handoffToLocalCli = async (argv, runningRoot) => {
   );
   if (!localCli) return void 0;
   printDiagnosticsToConsole(
-    `Using the project's local ${PACKAGE_NAME} (${path94.dirname(localCli)})`
+    `Using the project's local ${PACKAGE_NAME} (${path96.dirname(localCli)})`
   );
   const child = spawn4(process.execPath, [localCli, ...argv], {
     stdio: "inherit",