@sedim/cli 1.0.1 → 1.0.2

package/README.md

@@ -1,14 +1,13 @@
-# Sedim 
-![Sedim Banner](/assets/banner.jpeg)
+# Sedim
 
-[![Discord](https://img.shields.io/discord/1340085528308782080?color=7289DA&logo=discord&logoColor=white&label=discord)](https://discord.com/invite/H7yutstM)
+[![Discord](https://img.shields.io/discord/1507846093105397993?color=7289DA&logo=discord&logoColor=white&label=discord)](https://discord.com/invite/H7yutstM)
 [![GitHub Stars](https://img.shields.io/github/stars/Sedimie/Sedim?style=flat&logo=github)](https://github.com/Sedimie/Sedim)
 [![npm downloads](https://img.shields.io/npm/dw/@sedim/cli?label=weekly%20downloads)](https://www.npmjs.com/package/@sedim/cli)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)
 
 **Install complete features. Own every line.**
 
-Sedim is an open-source codegen CLI that stamps full-stack modules into your project, with out of the box working defaults. No runtime dependencies, no black boxes - every stamped file is readable, editable, and owned by you. Skip the 80% work done repetetively for just the 20% customizations on top.
+Sedim is an open-source codegen CLI that stamps full-stack modules into your project, with out of the box working defaults. No runtime dependencies, no black boxes - every stamped file is readable, editable, and owned by you. Skip the 80% work done repetitively for just the 20% customizations on top.
 
 ```bash
 npm install -g @sedim/cli
@@ -17,67 +16,68 @@ sedim init         # detects your stack
 sedim add auth     # stamps auth into your project
 ```
 
-The first POC for the stamping model is the Auth Module. Currently supports NextJS ( full stack ) ,Hono and Express (with react and vue frontends).
+The first POC for the stamping model is the Auth Module. Currently supports NextJS (full stack), Hono and Express (with React and Vue frontends).
 
 ---
- 
+
 ## See It In Action
- 
-<!-- Replace with your actual YouTube embed or linked thumbnail -->
-[![Sedim Full Walkthrough](https://img.youtube.com/vi/YOUR_VIDEO_ID/maxresdefault.jpg)](https://www.youtube.com/watch?v=YOUR_VIDEO_ID)
- 
+
+[![Sedim Full Walkthrough](https://img.youtube.com/vi/HPEjs7-O_vk/maxresdefault.jpg)](https://youtu.be/HPEjs7-O_vk)
+
 > 10-minute walkthrough - init, auth install, OAuth, TOTP, UI themes, and customization.
- 
+
 ---
- 
+
 ## Quick Start
- 
+
 **Requirements:** Node ≥ 18, an existing project with a supported framework and ORM.
- 
+
 ### 1. Install the CLI
- 
+
 ```bash
 npm install -g @sedim/cli
 ```
- 
+
 ### 2. Initialise your project
- 
+
 ```bash
 cd my-project
 sedim init
 ```
- 
+
 Sedim detects your framework, ORM, and language and writes a `sedim.config.ts`. If anything is detected incorrectly, edit the config file directly.
- 
+
 ### 3. Add auth
- 
+
 ```bash
 sedim add auth
 ```
- `Before writing the module directly, you can either run plan, diff or dry-run commands for the module as well!` 
+
+> Before writing the module directly, you can also run `plan`, `diff`, or `--dry-run` commands for the module!
 
 The CLI walks you through:
- 
-- **Environment detection** : confirms your framework, ORM, and language
-- **Feature selection** : email/password, OAuth providers, TOTP, magic links, JWT, RBAC/ABAC
-- **Frontend style** : headless, Tailwind styled, or themed with CSS tokens
-- **Confirm the plan** : review exactly what files will be stamped before anything is written
-- **Stamp** : files land in `src/sedim/auth/`
-- **Environment variables** : add them on the spot or copy the printed list to your `.env`
+
+- **Environment detection**: confirms your framework, ORM, and language
+- **Feature selection**: email/password, OAuth providers, TOTP, magic links, JWT, RBAC/ABAC
+- **Frontend style**: headless, Tailwind styled, or themed with CSS tokens
+- **Confirm the plan**: review exactly what files will be stamped before anything is written
+- **Stamp**: files land in `src/sedim/auth/`
+- **Environment variables**: add them on the spot or copy the printed list to your `.env`
+
 ### 4. Migrate and run
- 
+
 ```bash
 # Drizzle
 npx drizzle-kit push
- 
+
 # or Prisma
 npx prisma migrate dev --name add_auth
- 
+
 npm run dev
 ```
- 
+
 ---
- 
+
 ## What Gets Stamped
 
 Running `sedim add auth` generates this structure in your project. You own every file.
@@ -87,32 +87,32 @@ The exact files that get stamped depend on the features you select during `sedim
 ```
 src/sedim/auth/
 ├── core/
-│   ├── hash-password.ts     — Argon2id password hashing
-│   ├── generate-token.ts    — session tokens, OTP codes, backup codes, PKCE verifiers
-│   ├── session.ts           — session building and sliding-window validation
-│   ├── pkce.ts              — RFC 7636 PKCE (S256 only)
-│   ├── totp.ts              — RFC 6238 TOTP (Google Authenticator compatible)
-│   ├── totp-crypto.ts       — AES-256-GCM encryption for TOTP secrets
-│   ├── rate-limit.ts         — sliding-window rate limiter
-│   ├── rbac.ts               — role-based access control
-│   ├── abac.ts               — attribute-based access control
-│   ├── jwt.ts                — hybrid JWT (short-lived signed + DB-backed refresh)
-│   ├── oidc.ts               — OIDC discovery and id_token validation
-│   └── email-transport.ts    — multi-transport email (nodemailer/resend/postmark/ses)
+│   ├── hash-password.ts      - Argon2id password hashing
+│   ├── generate-token.ts     - session tokens, OTP codes, backup codes, PKCE verifiers
+│   ├── session.ts            - session building and sliding-window validation
+│   ├── pkce.ts               - RFC 7636 PKCE (S256 only)
+│   ├── totp.ts               - RFC 6238 TOTP (Google Authenticator compatible)
+│   ├── totp-crypto.ts        - AES-256-GCM encryption for TOTP secrets
+│   ├── rate-limit.ts         - sliding-window rate limiter
+│   ├── rbac.ts                - role-based access control
+│   ├── abac.ts                - attribute-based access control
+│   ├── jwt.ts                 - hybrid JWT (short-lived signed + DB-backed refresh)
+│   ├── oidc.ts                - OIDC discovery and id_token validation
+│   └── email-transport.ts     - multi-transport email (nodemailer/resend/postmark/ses)
 ├── adapters/
 │   ├── framework/
-│   │   ├── nextjs.ts         — Next.js App Router handler factory
-│   │   ├── express.ts        — Express router
-│   │   ├── hono.ts           — Hono route registration
-│   │   ├── operations.ts     — all auth operations (login, signup, OAuth, TOTP, etc.)
-│   │   └── framework-config.ts — OAuth provider configuration
-│   ├── drizzle.ts            — Drizzle ORM adapter
-│   ├── prisma.ts             — Prisma ORM adapter
-│   └── types.ts              — DatabaseAdapter interface and types
+│   │   ├── nextjs.ts          - Next.js App Router handler factory
+│   │   ├── express.ts         - Express router
+│   │   ├── hono.ts            - Hono route registration
+│   │   ├── operations.ts      - all auth operations (login, signup, OAuth, TOTP, etc.)
+│   │   └── framework-config.ts - OAuth provider configuration
+│   ├── drizzle.ts             - Drizzle ORM adapter
+│   ├── prisma.ts              - Prisma ORM adapter
+│   └── types.ts               - DatabaseAdapter interface and types
 ├── ui/
-│   ├── auth-client.ts         — client-side auth fetch utilities
-│   ├── use-auth.ts            — React hook for auth state
-│   ├── headless/             — unstyled, logic-only components
+│   ├── auth-client.ts          - client-side auth fetch utilities
+│   ├── use-auth.ts             - React hook for auth state
+│   ├── headless/              - unstyled, logic-only components
 │   │   ├── LoginForm.tsx
 │   │   ├── SignupForm.tsx
 │   │   ├── ForgotPasswordForm.tsx
@@ -120,76 +120,70 @@ src/sedim/auth/
 │   │   ├── MagicLinkForm.tsx
 │   │   ├── OAuthButton.tsx
 │   │   └── TotpVerifyForm.tsx
-│   ├── tailwind/              — Tailwind-styled components
-│   └── themed/                — pre-built themes with CSS tokens
-│       ├── modern-tokens.css  — glassmorphism theme
-│       ├── minimal-tokens.css — neumorphism theme
-│       └── colorful-tokens.css — neubrutalism theme
+│   ├── tailwind/               - Tailwind-styled components
+│   └── themed/                 - pre-built themes with CSS tokens
+│       ├── modern-tokens.css   - glassmorphism theme
+│       ├── minimal-tokens.css  - neumorphism theme
+│       └── colorful-tokens.css - neubrutalism theme
 ├── emails/
-│   └── email-verification.ts  — email template for verification
-├── schema.ts                  — Drizzle schema (users, sessions, oauth_accounts, etc.)
-└── index.ts                   — module barrel export
+│   └── email-verification.ts   - email template for verification
+├── schema.ts                   - Drizzle schema (users, sessions, oauth_accounts, etc.)
+└── index.ts                    - module barrel export
 ```
 
 The stamped auth route handler lands at `src/app/api/auth/[...all]/route.ts` (Next.js) or equivalent for other frameworks.
- 
+
 ---
- 
+
 ## Auth Module
- 
-Auth is the first Sedim module. It ships with everything, none of it is a black box.
 
-[Screencast from 2026-05-24 17-31-01.webm](https://github.com/user-attachments/assets/7f444748-d0bf-4329-a4cc-60507ae8b4df)
+Auth is the first Sedim module. It ships with everything, none of it is a black box.
 
- 
 ### Features
- 
+
 | Feature | Detail |
 |---|---|
 | **Password auth** | Argon2id (OWASP params), account lockout after 10 failed attempts |
 | **Session management** | SHA-256 hashed tokens, httpOnly cookies, full revocation |
-| **OAuth** | Google, GitHub, Discord :  PKCE (RFC 7636) on all flows |
+| **OAuth** | Google, GitHub, Discord: PKCE (RFC 7636) on all flows |
 | **TOTP** | RFC 6238, AES-256-GCM encrypted secrets at rest, backup codes |
 | **Magic links** | No email enumeration, supports SMTP / Resend / Postmark / SES |
 | **JWT** | Hybrid: short-lived signed JWTs + DB-backed refresh tokens |
 | **RBAC / ABAC** | Role and attribute-based access control middleware |
 | **Rate limiting** | Sliding window, in-memory or Redis store |
- 
+
 ### Stack Support
- 
+
 | Framework | Drizzle | Prisma |
 |-----------|:-------:|:------:|
 | Next.js (App Router) | ✓ | ✓ |
 | Express | ✓ | ✓ |
 | Hono | ✓ | ✓ |
- 
+
 | Email provider | Supported |
 |---|:---:|
 | Nodemailer (SMTP) | ✓ |
 | Resend | ✓ |
 | Postmark | ✓ |
 | AWS SES | ✓ |
- 
+
 ### UI Tiers
- 
-Three levels so you use your own design system or ship immediately.
 
-[Screencast from 2026-05-24 17-36-47.webm](https://github.com/user-attachments/assets/2c910cd5-8de8-4468-a2fd-db5011edd8d2)
+Three levels so you use your own design system or ship immediately.
 
- 
 **Headless** - zero CSS, pure logic and markup. Bring your own styles.
- 
+
 **Tailwind** - fully styled with Tailwind classes, works with your existing Tailwind config.
- 
+
 **Themed** - pre-built themes with CSS tokens. Currently ships `minimal` and `glass`.
- 
+
 ### Environment Variables
- 
+
 ```bash
 # Required
 AUTH_SECRET=                    # min 32 chars, used for session signing
 DATABASE_URL=                   # your database connection string
- 
+
 # OAuth - add only the providers you selected
 GOOGLE_CLIENT_ID=
 GOOGLE_CLIENT_SECRET=
@@ -197,7 +191,7 @@ GITHUB_CLIENT_ID=
 GITHUB_CLIENT_SECRET=
 DISCORD_CLIENT_ID=
 DISCORD_CLIENT_SECRET=
- 
+
 # Email - add only the provider you selected
 SMTP_HOST=
 SMTP_PORT=
@@ -208,14 +202,14 @@ POSTMARK_API_KEY=
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=
 AWS_SES_REGION=
- 
+
 # Optional
 REDIS_URL=                      # if using Redis for rate limiting or sessions
-TOTP_ENCRYPTION_KEY=            # required if TOTP is enabled, 32-byte hex
+TOTP_ENCRYPTION_KEY=           # required if TOTP is enabled, 32-byte hex
 ```
- 
+
 ---
- 
+
 ## Architecture
 
 Sedim uses a **stamp model**, not a runtime SDK:
@@ -236,33 +230,31 @@ The CLI has four components:
 
 Every module is described by a **manifest** (`registry/<module>/latest.json`) - a declarative spec of every file the module can stamp, what features gate each file, and what environment variables are required. The CLI reads the manifest, applies your choices, and stamps only what you need.
 
-```mermaid
-flowchart LR
-    Dev["Developer\nruns: sedim add auth"] --> Detector
-    Detector --> Thinker
-    RegistryJSON["Registry\nregistry/auth/latest.json"] --> Thinker
-    Thinker --> Writer
-    Writer --> StampedFiles["src/sedim/auth/\nuser-owned stamped files"]
-
-    RegistryJSON --> Dev
-
-    Thinker --> Plan["InstallPlan\napproved by user"]
-    Plan --> Writer
+### Flow
 
-    style Dev fill:#1a1a1a,color:#ffffff
-    style StampedFiles fill:#1a1a1a,color:#ffffff
-    style RegistryJSON fill:#333,color:#fff
-    style Plan fill:#333,color:#fff
+```
+Developer runs "sedim add auth"
+        ↓
+    Detector → identifies framework, ORM, language
+        ↓
+    Thinker  → loads registry manifest + module plan-config
+               + feature selections → InstallPlan
+        ↓
+    Writer   → stamps files to src/sedim/auth/
+               → writes migrations
+               → lists env vars
+        ↓
+    Showbaby → confirms what was written + next steps
 ```
 
 The module source lives in `packages/<module>/src/` - this is where auth logic, UI components, adapters, and templates live. The CLI reads from here when stamping. `packages/core/` holds shared TypeScript types used by both the CLI and all modules.
- 
+
 ---
- 
+
 ## Registry
- 
+
 Module manifests live in the [`registry/`](https://github.com/Sedimie/Sedim/tree/main/registry) directory. The CLI uses the local registry during development and falls back to the GitHub raw URL for published releases.
- 
+
 **Available modules:**
 
 | Module | Status |
@@ -274,25 +266,34 @@ Module manifests live in the [`registry/`](https://github.com/Sedimie/Sedim/tree
 | `WalletAdapters` | On the roadmap |
 | `ai-rag` | On the roadmap |
 | `payments` | On the roadmap |
- 
+
 ---
+
 ## Philosophy
- 
-Most tools give you an API to call. Customization is what's keeping modularizing full stack features at bay, but with codegen model, you own the code, and hence customize it however much you want. This is not just a library to cut your grunt work, you can learn the overall implementations it uses to be able to basically use the full stack features as boilerplate code.
- 
+
+Most tools give you an API to call. Customization is what's keeping modularizing full stack features at bay, but with the codegen model, you own the code, and hence customize it however much you want. This is not just a library to cut your grunt work - you can learn the overall implementations it uses to be able to basically use the full stack features as boilerplate code.
+
 When you run `sedim add auth`, you get the auth system, not a dependency on one. The files live in your repo, show up in your git history, and bend to whatever you need them to do. Sedim writes the first version. Everything after that is yours.
- 
-*The best code is code you own.*
 
+*The best code is code you own.*
 
 AI Agentic coding is another thing that this might clash with, but an AI tool might hallucinate and give 90% accuracy, leave out security considerations and make it tough to customize while also using up 3 hours and a considerable amount of tokens. This allows you to skip directly to the customizations part, with 100% hit-rate since it's static codegen, and 0 cost for the grunt work with upto date security standards being followed. Use AI tools on top of this to speed you up and make your workflow unbelievably fast.
 
 ---
 
 ### Check out the docs
+
 Full documentation - customization guides, adapter references, module authoring, and escape hatches - is at [sedim.dev/docs](https://sedim.dev/docs).
 
 ### Contributions
+
 To add a framework adapter, ORM adapter, or new module, see [CONTRIBUTING.md](./CONTRIBUTING.md).
- 
+
 The module spec and adapter interface are documented there - adding a new adapter for a supported module takes a few hours once you understand the pattern.
+
+### Watch the Full Walkthrough
+
+[![Sedim Full Walkthrough](https://img.youtube.com/vi/HPEjs7-O_vk/maxresdefault.jpg)](https://youtu.be/HPEjs7-O_vk)
+
+> 10-minute walkthrough - init, auth install, OAuth, TOTP, UI themes, and customization.
+> [Watch on YouTube](https://youtu.be/HPEjs7-O_vk)

package/dist/index.js

@@ -10,7 +10,7 @@ var __export = (target, all) => {
 };
 
 // src/shared/constants.ts
-var SEDIM_DIR, SEDIM_CONFIG_FILE, SEDIM_CONFIG_CACHE, SEDIM_SESSION_FILE, SEDIM_MODULES_DIR, SEDIM_LOGS_DIR, SEDIM_LATEST_LOG, DEFAULT_REGISTRY_URL, MIN_NODE_VERSION, CLI_VERSION;
+var SEDIM_DIR, SEDIM_CONFIG_FILE, SEDIM_CONFIG_CACHE, SEDIM_SESSION_FILE, SEDIM_MODULES_DIR, SEDIM_LOGS_DIR, SEDIM_LATEST_LOG, DEFAULT_REGISTRY_URL, DEFAULT_PACKAGES_URL, MIN_NODE_VERSION, CLI_VERSION;
 var init_constants = __esm({
   "src/shared/constants.ts"() {
     "use strict";
@@ -22,8 +22,9 @@ var init_constants = __esm({
     SEDIM_LOGS_DIR = `${SEDIM_DIR}/logs`;
     SEDIM_LATEST_LOG = `${SEDIM_LOGS_DIR}/latest.log`;
     DEFAULT_REGISTRY_URL = "https://raw.githubusercontent.com/sedimie/Sedim/main/registry";
+    DEFAULT_PACKAGES_URL = "https://raw.githubusercontent.com/sedimie/Sedim/main/packages";
     MIN_NODE_VERSION = 18;
-    CLI_VERSION = "1.0.0";
+    CLI_VERSION = "1.0.2";
   }
 });
 
@@ -4254,26 +4255,16 @@ async function classifyConflicts(projectRoot, ctx, filesToCreate, schemaTables)
 }
 
 // src/thinker/resolve-template.ts
-init_fs();
+init_constants();
 import path23 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { existsSync } from "fs";
 var __dirname3 = path23.dirname(fileURLToPath3(import.meta.url));
-function getPackageRoot(projectRoot, moduleName) {
-  return path23.resolve(projectRoot, "..", "..", "..", "packages", moduleName, "src");
-}
-async function resolveTemplate(templateKey, ctx, selectedFeatures = []) {
+async function resolveTemplate(templateKey, ctx, selectedFeatures = [], packagesUrl = DEFAULT_PACKAGES_URL) {
   const [moduleName, ...rest] = templateKey.split("/");
   if (!moduleName || rest.length === 0) {
     throw new Error(`Invalid templateKey: "${templateKey}"`);
   }
   const relPath = rest.join("/");
-  const projectRoot = ctx.projectRoot ?? process.cwd();
-  const packageRoot = getPackageRoot(projectRoot, moduleName);
-  const tryPackageRoot = (levels) => path23.resolve(__dirname3, levels, "packages", moduleName, "src");
-  const packageRoot3 = tryPackageRoot("../../..");
-  const packageRoot4 = tryPackageRoot("../../../../..");
-  const resolvedRoot = existsSync(packageRoot) ? packageRoot : existsSync(packageRoot3) ? packageRoot3 : existsSync(packageRoot4) ? packageRoot4 : packageRoot;
   const generatedKeys = {
     "ui/pages/login-page": (f) => buildLoginPage(f),
     "ui/pages/signup-page": (f) => buildSignupPage(f),
@@ -4285,58 +4276,60 @@ async function resolveTemplate(templateKey, ctx, selectedFeatures = []) {
     return generatedKeys[relPath](selectedFeatures, ctx);
   }
   let content;
-  const templatePath = path23.join(resolvedRoot, "templates", `${relPath}.ts`);
-  if (await exists(templatePath)) {
-    const raw = await readText(templatePath);
-    content = applySubstitutions(raw, ctx, selectedFeatures);
+  let found = false;
+  const asIsUrl = `${packagesUrl}/${moduleName}/src/${relPath}`;
+  const asIsFetched = await tryFetch(asIsUrl);
+  if (asIsFetched !== null) {
+    content = asIsFetched;
+    found = true;
   } else {
-    const templatePrismaPath = path23.join(resolvedRoot, "templates", `${relPath}.prisma`);
-    if (await exists(templatePrismaPath)) {
-      const raw = await readText(templatePrismaPath);
-      content = applySubstitutions(raw, ctx, selectedFeatures);
+    for (const tryExt of ["ts", "tsx", "css", "prisma"]) {
+      const url = `${packagesUrl}/${moduleName}/src/${relPath}.${tryExt}`;
+      const raw = await tryFetch(url);
+      if (raw !== null) {
+        content = raw;
+        found = true;
+        break;
+      }
+    }
+  }
+  if (!found) {
+    const templateAsIs = `${packagesUrl}/${moduleName}/src/templates/${relPath}`;
+    const fetchedAsIs = await tryFetch(templateAsIs);
+    if (fetchedAsIs !== null) {
+      content = fetchedAsIs;
+      found = true;
     } else {
-      const knownExts = [".ts", ".tsx", ".css", ".prisma"];
-      const hasExt = knownExts.some((e) => relPath.endsWith(e));
-      if (hasExt) {
-        const sourcePath = path23.join(resolvedRoot, relPath);
-        if (await exists(sourcePath)) {
-          content = await readText(sourcePath);
-          content = applySubstitutions(content, ctx, selectedFeatures);
-        } else {
-          content = "";
-        }
-      } else {
-        let found = false;
-        content = "";
-        for (const ext of [".ts", ".tsx", ".css"]) {
-          const sourcePath = path23.join(resolvedRoot, `${relPath}${ext}`);
-          if (await exists(sourcePath)) {
-            const raw = await readText(sourcePath);
-            content = applySubstitutions(raw, ctx, selectedFeatures);
-            found = true;
-            break;
-          }
-        }
-        if (!found) {
-          const sourcePrismaPath = path23.join(resolvedRoot, `${relPath}.prisma`);
-          if (await exists(sourcePrismaPath)) {
-            content = await readText(sourcePrismaPath);
-          } else {
-            throw new Error(
-              `Template not found for key "${templateKey}". Checked:
-  ${templatePath}
-  ${path23.join(resolvedRoot, relPath)}.[ts|tsx|css]`
-            );
-          }
-        }
+      const templateUrl = `${packagesUrl}/${moduleName}/src/templates/${relPath}.ts`;
+      const fetched = await tryFetch(templateUrl);
+      if (fetched !== null) {
+        content = fetched;
+        found = true;
       }
     }
   }
+  if (!found) {
+    throw new Error(
+      `Template not found for key "${templateKey}". Checked:
+  ${packagesUrl}/${moduleName}/src/${relPath}.[ts|tsx|css|prisma]
+  ${packagesUrl}/${moduleName}/src/templates/${relPath}.ts`
+    );
+  }
+  content = applySubstitutions(content, ctx, selectedFeatures);
   if (!relPath.endsWith(".css") && !relPath.endsWith(".prisma")) {
     content = stripRelativeJsExtensions(content);
   }
   return content;
 }
+async function tryFetch(url) {
+  try {
+    const res = await fetch(url);
+    if (!res.ok) return null;
+    return res.text();
+  } catch {
+    return null;
+  }
+}
 function stripRelativeJsExtensions(content) {
   return content.replace(/(from\s+['"])(\.\.?\/[^'"]*?)\.js(['"])/g, "$1$2$3");
 }
@@ -4475,7 +4468,7 @@ function buildLoginPage(features) {
       `      <p style={{ textAlign: 'center', fontSize: '0.8125rem', color: '${mutedColor}', margin: 0 }}>`
     );
     body.push(
-      `        Don&apos;t have an account?{' '}<a href="/signup" style={{ color: '${fgColor}', fontWeight: 600, textDecoration: 'none' }}>Sign up</a>`
+      `        Don't have an account?{' '}<a href="/signup" style={{ color: '${fgColor}', fontWeight: 600, textDecoration: 'none' }}>Sign up</a>`
     );
     body.push(`      </p>`);
   }
@@ -4640,7 +4633,7 @@ function buildForgotPage(features = []) {
   const inner = [
     `        <div style={{ textAlign: 'center' }}>`,
     `          <h1 style={{ fontSize: '1.5rem', fontWeight: 700, margin: '0 0 0.25rem' }}>Reset password</h1>`,
-    `          <p style={{ fontSize: '0.875rem', color: '${mutedColor}', margin: 0 }}>Enter your email and we&apos;ll send a reset link.</p>`,
+    `          <p style={{ fontSize: '0.875rem', color: '${mutedColor}', margin: 0 }}>Enter your email and we'll send a reset link.</p>`,
     `        </div>`,
     `        <ForgotPasswordForm />`,
     `        <p style={{ textAlign: 'center', fontSize: '0.8125rem', margin: 0 }}>`,
@@ -5017,7 +5010,31 @@ function manifestToPlanConfig(manifest, selectedFeatures, _ctx) {
 }
 
 // src/thinker/load-plan-config.ts
-async function loadPlanConfig(moduleName, manifest, ctx, selectedFeatures) {
+init_constants();
+import { createWriteStream } from "fs";
+import https from "https";
+import os from "os";
+import { pipeline } from "stream";
+import { promisify } from "util";
+var streamPipeline = promisify(pipeline);
+async function downloadToTemp(url, suffix) {
+  const tmpDir = os.tmpdir();
+  const tmpPath = `${tmpDir}/sedim-${suffix}-${Date.now()}.js`;
+  await new Promise((resolve, reject) => {
+    const req = https.get(url, (res) => {
+      if (res.statusCode !== 200) {
+        reject(new Error(`HTTP ${res.statusCode}`));
+        return;
+      }
+      const file = createWriteStream(tmpPath);
+      res.pipe(file);
+      file.on("finish", () => file.close(() => resolve()));
+    });
+    req.on("error", reject);
+  });
+  return tmpPath;
+}
+async function loadPlanConfig(moduleName, manifest, ctx, selectedFeatures, packagesUrl = DEFAULT_PACKAGES_URL) {
   try {
     const fnName = `create${capitalize(moduleName)}PlanConfig`;
     const mod = await import(`@sedim/${moduleName}/plan-config`);
@@ -5027,7 +5044,20 @@ async function loadPlanConfig(moduleName, manifest, ctx, selectedFeatures) {
         selectedFeatures
       );
     }
-  } catch (err) {
+  } catch {
+  }
+  try {
+    const fnName = `create${capitalize(moduleName)}PlanConfig`;
+    const remoteUrl = `${packagesUrl}/${moduleName}/planConfig/plan-config.js`;
+    const tmpPath = await downloadToTemp(remoteUrl, moduleName);
+    const mod = await import(tmpPath);
+    if (mod && typeof mod[fnName] === "function") {
+      return mod[fnName](
+        ctx,
+        selectedFeatures
+      );
+    }
+  } catch {
   }
   return manifestToPlanConfig(manifest, selectedFeatures, ctx);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sedim/cli",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Premium codegen CLI — stamp production-ready feature modules into your project",
   "type": "module",
   "main": "./dist/index.js",