alepha 0.21.2 → 0.22.0

package/dist/cli/core/index.js

@@ -10,9 +10,7 @@ import { basename, dirname, isAbsolute, join, relative, resolve } from "node:pat
 import pkg from "alepha/package.json" with { type: "json" };
 import { analyzer } from "vite-bundle-analyzer";
 import { KV_DEFAULT_BINDING } from "alepha/cache";
-import { $container } from "alepha/containers";
-import { EmailProvider } from "alepha/email";
-import { CloudflareEmailProvider, SEND_EMAIL_DEFAULT_BINDING } from "alepha/email/cloudflare";
+import { SEND_EMAIL_DEFAULT_BINDING } from "alepha/email/cloudflare";
 import { QUEUE_DEFAULT_BINDING } from "alepha/queue";
 import { promisify } from "node:util";
 import { brotliCompress, gzip } from "node:zlib";
@@ -1109,7 +1107,6 @@ var PackageManagerUtils = class {
 			devDependencies.tailwindcss = alephaDeps.tailwindcss;
 			devDependencies["@tailwindcss/vite"] = alephaDeps["@tailwindcss/vite"];
 		}
-		if (modes.shadcn) devDependencies.shadcn = alephaDeps.shadcn;
 		if (modes.react) {
 			dependencies.react = alephaDeps.react;
 			dependencies["react-dom"] = alephaDeps["react-dom"];
@@ -1279,19 +1276,7 @@ export type HelloResponse = Static<typeof helloResponseSchema>;
 //#endregion
 //#region ../../src/cli/core/templates/apiIndexTs.ts
 const apiIndexTs = (options = {}) => {
-	const { appName = "app", saas = false } = options;
-	if (saas) return `
-import { $module } from "alepha";
-import { AlephaApiUsers } from "alepha/api/users";
-import { HelloController } from "./controllers/HelloController.ts";
-import { RealmProvider } from "./providers/RealmProvider.ts";
-
-export const ApiModule = $module({
-  name: "${appName}.api",
-  services: [HelloController, RealmProvider],
-  imports: [AlephaApiUsers],
-});
-`.trim();
+	const { appName = "app" } = options;
 	return `
 import { $module } from "alepha";
 import { HelloController } from "./controllers/HelloController.ts";
@@ -1362,46 +1347,6 @@ const biomeJson = () => `
 }
 `.trim();
 //#endregion
-//#region ../../src/cli/core/templates/componentsJsonTs.ts
-/**
-* `components.json` is the shadcn CLI's project config — it tells
-* `shadcn add` where to drop primitives, which tailwind tokens to use,
-* which icon library to wire up, and which custom registries to resolve.
-*
-* Aliases follow shadcn's defaults (`@/components`, `@/lib/utils`) so the
-* CLI honors them across `init` + `add` calls. Alepha app code lives at
-* `src/web/` (Home, AppRouter, …) and the shadcn primitives live at
-* `src/components/` — kept separate to make the registry components
-* trivially upgradable via `shadcn add --overwrite`.
-*
-* The `registries` block pre-wires the public Alepha registry — consumers
-* can immediately run e.g. `shadcn add @alepha/auth-login`.
-*/
-const componentsJsonTs = () => `{
-  "$schema": "https://ui.shadcn.com/schema.json",
-  "style": "new-york",
-  "rsc": false,
-  "tsx": true,
-  "tailwind": {
-    "config": "",
-    "css": "src/main.css",
-    "baseColor": "neutral",
-    "cssVariables": true
-  },
-  "aliases": {
-    "components": "@/components",
-    "utils": "@/lib/utils",
-    "ui": "@/components/ui",
-    "lib": "@/lib",
-    "hooks": "@/hooks"
-  },
-  "iconLibrary": "lucide",
-  "registries": {
-    "@alepha": "https://alepha.dev/r/{name}.json"
-  }
-}
-`;
-//#endregion
 //#region ../../src/cli/core/templates/dummySpecTs.ts
 /**
 * Starter spec written by `alepha init`. It doubles as a worked example:
@@ -1555,7 +1500,6 @@ const mainCss = (opts = {}) => {
  *
  * Options:
  * - Tailwind CSS: Use \`alepha init --tailwind\` to add Tailwind CSS
- * - shadcn/ui: Use \`alepha init --shadcn\` to add shadcn/ui setup
  * - Raw CSS: Write your own styles below
  */
 
@@ -1586,241 +1530,6 @@ run(alepha);
 `.trim();
 };
 //#endregion
-//#region ../../src/cli/core/templates/saasAdminLayoutTsx.ts
-/**
-* SaaS admin layout — full AppShell on /admin with a sidebar, breadcrumbs,
-* a Sonner toaster, and a confirm provider. The page list grows with
-* whatever `admin-*` registry components the user adds.
-*
-* All UI primitives come from `src/components/*` where `shadcn add` drops
-* them; alepha app code lives in `src/web/*` and references them via the
-* `@/components/*` alias.
-*/
-const saasAdminLayoutTsx = () => `import { AppShell } from "@/components/app-shell/app-shell";
-import { Toaster } from "@/components/ui/sonner";
-import { TooltipProvider } from "@/components/ui/tooltip";
-import { DialogProvider } from "@/components/use-dialog/use-dialog";
-import { NestedView, useRouterState } from "alepha/react/router";
-import { ShieldCheck, Users } from "lucide-react";
-
-const NAV = [
-  {
-    label: "Identity",
-    items: [
-      { href: "/admin/users", label: "Users", icon: Users },
-      { href: "/admin/sessions", label: "Sessions", icon: ShieldCheck },
-    ],
-  },
-] as const;
-
-const findCrumbs = (pathname: string): { label: string; href?: string }[] => {
-  for (const group of NAV) {
-    const match = group.items.find((it) => it.href === pathname);
-    if (match) return [{ label: group.label }, { label: match.label }];
-  }
-  return [];
-};
-
-const AdminLayout = () => {
-  const state = useRouterState();
-  const crumbs = findCrumbs(state.url.pathname);
-
-  return (
-    <TooltipProvider>
-      <DialogProvider>
-        <AppShell
-          brand={
-            <a
-              href="/admin"
-              className="flex items-center gap-2 px-2 py-2 font-semibold group-data-[collapsible=icon]:justify-center group-data-[collapsible=icon]:px-0"
-            >
-              <span className="bg-primary text-primary-foreground flex size-7 shrink-0 items-center justify-center rounded">
-                α
-              </span>
-              <span className="truncate group-data-[collapsible=icon]:hidden">
-                Admin
-              </span>
-            </a>
-          }
-          nav={NAV.map((group) => ({
-            label: group.label,
-            items: group.items.map((it) => ({
-              href: it.href,
-              label: it.label,
-              icon: it.icon,
-              active: it.href === state.url.pathname,
-            })),
-          }))}
-          breadcrumbs={crumbs.length ? crumbs : undefined}
-        >
-          <NestedView />
-        </AppShell>
-        <Toaster />
-      </DialogProvider>
-    </TooltipProvider>
-  );
-};
-
-export default AdminLayout;
-`;
-//#endregion
-//#region ../../src/cli/core/templates/saasAdminPagesTsx.ts
-/**
-* Admin pages — each is a thin wrapper around the matching `admin-*`
-* registry component (placed at `src/components/admin/*`). The starter
-* ships with Users + Sessions; add more by `shadcn add @alepha/admin-…`
-* and a matching `$page(...)` in AppRouter.
-*/
-const saasAdminUsersTsx = () => `import { AdminUsers } from "@/components/admin/admin-users";
-
-const AdminUsersPage = () => {
-  return <AdminUsers />;
-};
-
-export default AdminUsersPage;
-`;
-const saasAdminSessionsTsx = () => `import { AdminSessions } from "@/components/admin/admin-sessions";
-
-const AdminSessionsPage = () => {
-  return <AdminSessions />;
-};
-
-export default AdminSessionsPage;
-`;
-//#endregion
-//#region ../../src/cli/core/templates/saasAuthLayoutTsx.ts
-/**
-* SaaS auth layout — route parent for every /auth/* page (login, register,
-* reset-password, verify-email), mounted as children so they share it.
-*
-* The auth-* blocks from the registry are self-contained full-page layouts
-* (they own their own min-height, centering and padding), so this layout is
-* just a passthrough — wrapping them in another centered, padded, full-height
-* box would overflow the viewport and add a scrollbar.
-*/
-const saasAuthLayoutTsx = () => `import { NestedView } from "alepha/react/router";
-
-const AuthLayout = () => {
-  return (
-    <div className="bg-background">
-      <NestedView />
-    </div>
-  );
-};
-
-export default AuthLayout;
-`;
-//#endregion
-//#region ../../src/cli/core/templates/saasAuthPagesTsx.ts
-/**
-* Per-page wrapper around the registry components. The registry component
-* receives the realm config from the page loader; the page itself stays a
-* thin shell so apps can layer their branding around it.
-*
-* Registry components land at `src/components/auth/*` (shadcn defaults).
-*/
-const saasAuthLoginTsx = () => `import { AuthLogin } from "@/components/auth/auth-login";
-import type { RealmConfig } from "alepha/api/users";
-
-export interface AuthLoginPageProps {
-  realmConfig: RealmConfig;
-}
-
-const AuthLoginPage = (props: AuthLoginPageProps) => {
-  return <AuthLogin realmConfig={props.realmConfig} />;
-};
-
-export default AuthLoginPage;
-`;
-const saasAuthRegisterTsx = () => `import { AuthRegister } from "@/components/auth/auth-register";
-import type { RealmConfig } from "alepha/api/users";
-
-export interface AuthRegisterPageProps {
-  realmConfig: RealmConfig;
-}
-
-const AuthRegisterPage = (props: AuthRegisterPageProps) => {
-  return <AuthRegister realmConfig={props.realmConfig} />;
-};
-
-export default AuthRegisterPage;
-`;
-const saasAuthResetPasswordTsx = () => `import { AuthResetPassword } from "@/components/auth/auth-reset-password";
-import type { RealmConfig } from "alepha/api/users";
-
-export interface AuthResetPasswordPageProps {
-  realmConfig: RealmConfig;
-}
-
-const AuthResetPasswordPage = (props: AuthResetPasswordPageProps) => {
-  return <AuthResetPassword realmConfig={props.realmConfig} />;
-};
-
-export default AuthResetPasswordPage;
-`;
-const saasAuthVerifyEmailTsx = () => `import { AuthVerifyEmail } from "@/components/auth/auth-verify-email";
-
-const AuthVerifyEmailPage = () => {
-  return <AuthVerifyEmail />;
-};
-
-export default AuthVerifyEmailPage;
-`;
-//#endregion
-//#region ../../src/cli/core/templates/saasRealmProviderTs.ts
-/**
-* Realm provider scaffolded by `alepha init --saas`.
-*
-* Minimal hello-world setup: credentials login with email, admins seeded
-* from the `ADMIN_EMAILS` env var, and an `admin:ui` permission used by the
-* AppRouter to gate `/admin/*`. The default `admin` role grants `*` (so it
-* inherits `admin:ui`); the default `user` role excludes `admin:*` (so
-* non-admins get a 403 before the shell renders).
-*
-* Admin emails are read from the environment, never hard-coded — they are
-* deployment config (different per environment, and personal data) and
-* belong in `.env`, not in committed source.
-*/
-const saasRealmProviderTs = () => {
-	return `import { $env, t } from "alepha";
-import { $realm } from "alepha/api/users";
-import { $permission } from "alepha/security";
-
-export class RealmProvider {
-  /**
-   * Permission required to open the admin UI. Wired into AppRouter.adminLayout
-   * via \`$secure({ permissions: ["admin:ui"] })\`.
-   */
-  adminUi = $permission({
-    group: "admin",
-    name: "ui",
-    description: "Access to the admin UI shell",
-  });
-
-  /**
-   * Admin emails — set \`ADMIN_EMAILS\` in \`.env\` (comma-separated for
-   * several). Keep emails out of source: they are config, not code.
-   */
-  protected readonly env = $env(
-    t.object({
-      ADMIN_EMAILS: t.text({ default: "" }),
-    }),
-  );
-
-  realm = $realm({
-    settings: {
-      adminEmails: this.env.ADMIN_EMAILS.split(",")
-        .map((email) => email.trim())
-        .filter(Boolean),
-    },
-    identities: {
-      credentials: true,
-    },
-  });
-}
-`;
-};
-//#endregion
 //#region ../../src/cli/core/templates/tsconfigJson.ts
 const tsconfigJson = () => `
 {
@@ -1886,10 +1595,6 @@ const vscodeSettingsJson = () => `
 //#endregion
 //#region ../../src/cli/core/templates/webAppRouterTs.ts
 const webAppRouterTs = (options) => {
-	if (options.saas) return saasAppRouterTs();
-	return basicAppRouterTs(options);
-};
-const basicAppRouterTs = (options) => {
 	const imports = ["import { $page } from \"alepha/react/router\";"];
 	const classMembers = [];
 	if (options.api) {
@@ -1911,95 +1616,6 @@ export class AppRouter {
 ${classMembers.join("\n\n")}
 }`;
 };
-/**
-* SaaS router wires three trees onto the app:
-*   /            → Home
-*   /auth/*      → AuthLayout + login / register / reset / verify
-*   /admin/*     → AdminLayout + users / sessions / api-keys / parameters / audits
-*
-* Each auth page resolves the realm config from its loader, so the registry
-* components render with everything they need on first paint.
-*/
-const saasAppRouterTs = () => `import type { RealmController } from "alepha/api/users";
-import { $page, NotFound } from "alepha/react/router";
-import { $secure } from "alepha/security";
-import { $client } from "alepha/server/links";
-import type { HelloController } from "../api/controllers/HelloController.ts";
-
-export class AppRouter {
-  protected readonly api = $client<HelloController>();
-  protected readonly realmApi = $client<RealmController>();
-
-  home = $page({
-    path: "/",
-    lazy: () => import("./components/Home.tsx"),
-    loader: () => this.api.hello(),
-  });
-
-  // ── /auth — login, register, reset, verify ─────────────────────────────
-  authLayout = $page({
-    path: "/auth",
-    lazy: () => import("./components/auth/AuthLayout.tsx"),
-  });
-
-  login = $page({
-    parent: this.authLayout,
-    path: "/login",
-    name: "login",
-    head: { title: "Sign in" },
-    lazy: () => import("./components/auth/Login.tsx"),
-    loader: async () => ({ realmConfig: await this.realmApi.getRealmConfig() }),
-  });
-
-  register = $page({
-    parent: this.authLayout,
-    path: "/register",
-    name: "register",
-    head: { title: "Sign up" },
-    lazy: () => import("./components/auth/Register.tsx"),
-    loader: async () => ({ realmConfig: await this.realmApi.getRealmConfig() }),
-  });
-
-  resetPassword = $page({
-    parent: this.authLayout,
-    path: "/reset-password",
-    head: { title: "Reset password" },
-    lazy: () => import("./components/auth/ResetPassword.tsx"),
-    loader: async () => ({ realmConfig: await this.realmApi.getRealmConfig() }),
-  });
-
-  verifyEmail = $page({
-    parent: this.authLayout,
-    path: "/verify-email",
-    head: { title: "Verify email" },
-    lazy: () => import("./components/auth/VerifyEmail.tsx"),
-  });
-
-  // ── /admin — gated by 'admin:ui' permission, declared in RealmProvider.
-  // Children inherit the gate via the parent chain.
-  adminLayout = $page({
-    path: "/admin",
-    use: [$secure({ permissions: ["admin:ui"] })],
-    lazy: () => import("./components/admin/AdminLayout.tsx"),
-  });
-
-  adminUsers = $page({
-    parent: this.adminLayout,
-    path: "/users",
-    head: { title: "Users" },
-    lazy: () => import("./components/admin/Users.tsx"),
-  });
-
-  adminSessions = $page({
-    parent: this.adminLayout,
-    path: "/sessions",
-    head: { title: "Sessions" },
-    lazy: () => import("./components/admin/Sessions.tsx"),
-  });
-
-  notFound = $page({ path: "/*", component: NotFound });
-}
-`;
 //#endregion
 //#region ../../src/cli/core/templates/webHomeComponentTsx.ts
 const webHomeComponentTsx = (options = {}) => {
@@ -2028,19 +1644,7 @@ export default Home;
 //#endregion
 //#region ../../src/cli/core/templates/webIndexTs.ts
 const webIndexTs = (options = {}) => {
-	const { appName = "app", saas = false } = options;
-	if (saas) return `
-import { $module } from "alepha";
-import { AlephaReactAuth } from "alepha/react/auth";
-import { AlephaReactI18n } from "alepha/react/i18n";
-import { AppRouter } from "./AppRouter.ts";
-
-export const WebModule = $module({
-  name: "${appName}.web",
-  services: [AppRouter],
-  imports: [AlephaReactAuth, AlephaReactI18n],
-});
-`.trim();
+	const { appName = "app" } = options;
 	return `
 import { $module } from "alepha";
 import { AppRouter } from "./AppRouter.ts";
@@ -2066,7 +1670,6 @@ var ProjectScaffolder = class {
 	log = $logger();
 	colors = $inject(ConsoleColorProvider);
 	fs = $inject(FileSystemProvider);
-	shell = $inject(ShellProvider);
 	pm = $inject(PackageManagerUtils);
 	utils = $inject(AlephaCliUtils);
 	/**
@@ -2088,10 +1691,7 @@ var ProjectScaffolder = class {
 		const force = opts.force ?? false;
 		const checkWorkspace = opts.checkWorkspace ?? false;
 		if (opts.packageJson) tasks.push(this.pm.ensurePackageJson(root, typeof opts.packageJson === "boolean" ? {} : opts.packageJson).then(() => {}));
-		if (opts.tsconfigJson) tasks.push(this.ensureTsConfig(root, {
-			force,
-			localOnly: opts.tsconfigJson === "local"
-		}));
+		if (opts.tsconfigJson) tasks.push(this.ensureTsConfig(root, { force }));
 		if (opts.biomeJson) tasks.push(this.ensureBiomeConfig(root, {
 			force,
 			checkWorkspace
@@ -2108,7 +1708,7 @@ var ProjectScaffolder = class {
 		await Promise.all(tasks);
 	}
 	async ensureTsConfig(root, opts = {}) {
-		const exists = opts.localOnly ? await this.fs.exists(this.fs.join(root, "tsconfig.json")) : await this.existsInParents(root, "tsconfig.json");
+		const exists = await this.existsInParents(root, "tsconfig.json");
 		if (!opts.force && exists) return;
 		await this.fs.writeFile(this.fs.join(root, "tsconfig.json"), tsconfigJson());
 	}
@@ -2185,33 +1785,9 @@ var ProjectScaffolder = class {
 		const appName = this.getAppName(root);
 		await this.fs.mkdir(this.fs.join(root, "src/api/controllers"), { recursive: true });
 		await this.fs.mkdir(this.fs.join(root, "src/api/schemas"), { recursive: true });
-		await this.ensureFile(root, "src/api/index.ts", apiIndexTs({
-			appName,
-			saas: opts.saas
-		}), opts.force);
+		await this.ensureFile(root, "src/api/index.ts", apiIndexTs({ appName }), opts.force);
 		await this.ensureFile(root, "src/api/controllers/HelloController.ts", apiHelloControllerTs({ appName }), opts.force);
 		await this.ensureFile(root, "src/api/schemas/helloResponseSchema.ts", apiHelloResponseSchemaTs(), opts.force);
-		if (opts.saas) {
-			await this.fs.mkdir(this.fs.join(root, "src/api/providers"), { recursive: true });
-			await this.ensureFile(root, "src/api/providers/RealmProvider.ts", saasRealmProviderTs(), opts.force);
-			const adminEmail = await this.detectGitEmail() ?? "admin@alepha.dev";
-			await this.ensureFile(root, ".env", `ADMIN_EMAILS=${adminEmail}\n`, opts.force);
-		}
-	}
-	/**
-	* Best-effort lookup for the developer's git email — seeded as
-	* `ADMIN_EMAILS` in the SaaS project's `.env`. Returns undefined if git
-	* isn't available or `user.email` isn't configured; the caller then falls
-	* back to the neutral `admin@alepha.dev`.
-	*/
-	async detectGitEmail() {
-		try {
-			const email = (await this.shell.run("git config --get user.email", { capture: true }) ?? "").trim();
-			if (!email || !email.includes("@")) return void 0;
-			return email;
-		} catch {
-			return;
-		}
 	}
 	/**
 	* Ensure web/React project structure exists.
@@ -2224,35 +1800,14 @@ var ProjectScaffolder = class {
 	async ensureWebProject(root, opts = {}) {
 		const appName = this.getAppName(root);
 		await this.fs.mkdir(this.fs.join(root, "src/web/components"), { recursive: true });
-		if (opts.saas) {
-			await this.fs.mkdir(this.fs.join(root, "src/web/components/auth"), { recursive: true });
-			await this.fs.mkdir(this.fs.join(root, "src/web/components/admin"), { recursive: true });
-		}
 		await this.fs.mkdir(this.fs.join(root, "public"), { recursive: true });
 		await this.ensureFile(root, "public/favicon.svg", logoSvg, opts.force);
 		await this.ensureFile(root, "src/main.css", mainCss({ tailwind: opts.tailwind }), opts.force);
 		if (opts.tailwind) await this.ensureFile(root, "vite.config.ts", viteConfigTs(), opts.force);
-		if (opts.shadcn) await this.ensureFile(root, "components.json", componentsJsonTs(), opts.force);
-		await this.ensureFile(root, "src/web/index.ts", webIndexTs({
-			appName,
-			saas: opts.saas
-		}), opts.force);
-		await this.ensureFile(root, "src/web/AppRouter.ts", webAppRouterTs({
-			api: opts.api,
-			saas: opts.saas
-		}), opts.force);
+		await this.ensureFile(root, "src/web/index.ts", webIndexTs({ appName }), opts.force);
+		await this.ensureFile(root, "src/web/AppRouter.ts", webAppRouterTs({ api: opts.api }), opts.force);
 		await this.ensureFile(root, "src/web/components/Home.tsx", webHomeComponentTsx({ api: opts.api }), opts.force);
 		await this.ensureFile(root, "src/main.browser.ts", mainBrowserTs(), opts.force);
-		if (opts.saas) {
-			await this.ensureFile(root, "src/web/components/auth/AuthLayout.tsx", saasAuthLayoutTsx(), opts.force);
-			await this.ensureFile(root, "src/web/components/auth/Login.tsx", saasAuthLoginTsx(), opts.force);
-			await this.ensureFile(root, "src/web/components/auth/Register.tsx", saasAuthRegisterTsx(), opts.force);
-			await this.ensureFile(root, "src/web/components/auth/ResetPassword.tsx", saasAuthResetPasswordTsx(), opts.force);
-			await this.ensureFile(root, "src/web/components/auth/VerifyEmail.tsx", saasAuthVerifyEmailTsx(), opts.force);
-			await this.ensureFile(root, "src/web/components/admin/AdminLayout.tsx", saasAdminLayoutTsx(), opts.force);
-			await this.ensureFile(root, "src/web/components/admin/Users.tsx", saasAdminUsersTsx(), opts.force);
-			await this.ensureFile(root, "src/web/components/admin/Sessions.tsx", saasAdminSessionsTsx(), opts.force);
-		}
 	}
 	/**
 	* Ensure test directory exists with a dummy test file + a self-contained
@@ -2275,21 +1830,16 @@ var ProjectScaffolder = class {
 	* Full project init — scaffolds files, installs deps, sets up PM and git.
 	*/
 	async init({ run, root, flags, args }) {
+		if (!args) {
+			if (!await this.fs.exists(this.fs.join(root, "package.json"))) args = "my-app";
+		}
 		if (args) {
 			root = this.fs.join(root, args);
 			await this.fs.mkdir(root, { force: true });
 		}
-		const shadcnPreset = typeof flags.saas === "string" && flags.saas || typeof flags.shadcn === "string" && flags.shadcn || "b0";
-		const f = flags;
-		f.shadcn = !!flags.shadcn;
-		f.saas = !!flags.saas;
-		if (f.saas) {
-			f.shadcn = true;
-			f.api = true;
-		}
-		if (f.shadcn) f.tailwind = true;
 		if (flags.tailwind) flags.react = true;
-		if ((flags.api || flags.react || flags.tailwind || flags.shadcn || flags.saas) && !flags.force) {
+		const f = flags;
+		if ((flags.api || flags.react || flags.tailwind) && !flags.force) {
 			if ((await this.fs.ls(root)).filter((f) => f !== "package.json").length > 0) throw new AlephaError(`Target directory is not empty (${root}). Use --force to overwrite existing files.`);
 		}
 		const workspace = await this.pm.getWorkspaceContext(root);
@@ -2305,7 +1855,7 @@ var ProjectScaffolder = class {
 						...f,
 						isPackage: workspace.isPackage
 					},
-					tsconfigJson: f.shadcn ? "local" : !workspace.config.tsconfigJson,
+					tsconfigJson: !workspace.config.tsconfigJson,
 					biomeJson: true,
 					editorconfig: !workspace.config.editorconfig,
 					agentMd: writeAgentMd,
@@ -2317,15 +1867,10 @@ var ProjectScaffolder = class {
 					react: !!flags.react && !isExpo,
 					force
 				});
-				if (flags.api) await this.ensureApiProject(root, {
-					saas: !!flags.saas,
-					force
-				});
+				if (flags.api) await this.ensureApiProject(root, { force });
 				if (flags.react && !isExpo) await this.ensureWebProject(root, {
 					api: !!flags.api,
 					tailwind: !!flags.tailwind,
-					shadcn: !!flags.shadcn,
-					saas: !!flags.saas,
 					force
 				});
 			}
@@ -2343,18 +1888,6 @@ var ProjectScaffolder = class {
 			root: installRoot
 		});
 		await this.ensureTestDir(root);
-		const exec = pmExecPrefix(pmName);
-		if (flags.shadcn) {
-			await run(`${exec} shadcn init --no-monorepo --base radix -t vite --yes --force --reinstall --preset ${escapeShellArg(shadcnPreset)}`, {
-				alias: `running shadcn init (preset ${shadcnPreset})`,
-				root
-			});
-			await this.fs.writeFile(this.fs.join(root, "components.json"), componentsJsonTs());
-		}
-		if (flags.saas) await run(`${exec} shadcn add @alepha/saas --yes --overwrite`, {
-			alias: "adding alepha saas registry bundle",
-			root
-		});
 		try {
 			await run(`${pmName} run lint`, {
 				alias: "running linter",
@@ -2401,30 +1934,6 @@ var ProjectScaffolder = class {
 		}
 	}
 };
-/**
-* Map a package manager name to the command that runs a project-local binary.
-*
-* - npm:  `npx`
-* - yarn: `yarn` (yarn auto-resolves binary names; `yarn shadcn ...` works)
-* - pnpm: `pnpm exec`
-* - bun:  `bunx`
-*
-* Used to invoke `shadcn init` / `shadcn add` regardless of the user's PM —
-* `npm shadcn ...` is invalid (it tries to run a script named `shadcn`).
-*/
-/** Quote a value so it survives shell parsing. */
-const escapeShellArg = (value) => {
-	if (/^[A-Za-z0-9_./@:-]+$/.test(value)) return value;
-	return `'${value.replace(/'/g, "'\\''")}'`;
-};
-const pmExecPrefix = (pmName) => {
-	switch (pmName) {
-		case "npm": return "npx";
-		case "pnpm": return "pnpm exec";
-		case "bun": return "bunx";
-		default: return "yarn";
-	}
-};
 //#endregion
 //#region ../../src/cli/core/tasks/BuildTask.ts
 /**
@@ -2563,6 +2072,7 @@ var BuildClientTask = class extends BuildTask {
 };
 //#endregion
 //#region ../../src/cli/core/tasks/BuildCloudflareTask.ts
+const CLOUDFLARE_EMAIL_PROVIDER_NAME = "CloudflareEmailProvider";
 /**
 * Generate Cloudflare Workers deployment configuration.
 *
@@ -2586,7 +2096,7 @@ var BuildCloudflareTask = class BuildCloudflareTask extends BuildTask {
 	}
 	async generateCloudflare(ctx, distDir) {
 		const root = ctx.root;
-		const name = basename(root);
+		const name = basename(root).toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 63);
 		const hasAssets = await this.fs.exists(this.fs.join(root, distDir, "public"));
 		const wrangler = {
 			name,
@@ -2617,8 +2127,71 @@ var BuildCloudflareTask = class BuildCloudflareTask extends BuildTask {
 		this.enhanceEmail(ctx, wrangler);
 		const containers = this.enhanceContainers(ctx, wrangler);
 		await this.fs.writeFile(this.fs.join(root, distDir, "wrangler.jsonc"), JSON.stringify(wrangler, null, 2));
+		if (!ctx.manifest) await this.writeManifest(ctx, root, distDir, name, containers);
 		await this.writeWorkerEntryPoint(root, distDir, containers);
 	}
+	/**
+	* Write `dist/manifest.json` — a build-time snapshot of everything
+	* downstream tooling needs to know about the app without re-booting
+	* it. Used by `alepha platform up --prebuilt` (and Alepha Rocket) so
+	* the deploy path can skip the Vite-based introspection step and the
+	* workspace's runtime npm install.
+	*/
+	async writeManifest(ctx, root, distDir, name, containers) {
+		let hasDatabase = false;
+		let hasBucket = false;
+		let hasKV = false;
+		let hasQueue = false;
+		let crons = [];
+		try {
+			hasDatabase = (ctx.alepha.inject("RepositoryProvider").getRepositories?.() ?? []).length > 0;
+		} catch {}
+		try {
+			hasBucket = ctx.alepha.primitives("$bucket").length > 0;
+		} catch {}
+		try {
+			hasKV = ctx.alepha.primitives("cache").filter((p) => p.options?.provider == null).length > 0;
+		} catch {}
+		try {
+			hasQueue = ctx.alepha.primitives("$queue").length > 0;
+		} catch {}
+		try {
+			const cronProvider = ctx.alepha.inject("CronProvider");
+			crons = [...new Set((cronProvider.getCronJobs?.() ?? []).map((c) => c.expression))];
+		} catch {}
+		const defaultEnv = ctx.platformOptions?.default ?? "production";
+		const environments = ctx.platformOptions?.environments ?? {};
+		let env = [];
+		try {
+			env = Object.keys(ctx.alepha.dump().env).sort();
+		} catch {}
+		const manifest = {
+			version: 1,
+			project: name,
+			defaultEnv,
+			tenancy: ctx.platformOptions?.tenancy,
+			environments,
+			resources: {
+				hasDatabase,
+				hasBucket,
+				hasKV,
+				hasQueue,
+				hasCron: crons.length > 0
+			},
+			crons,
+			containers: containers.map((c) => ({
+				name: c.name,
+				className: c.className,
+				image: c.image,
+				port: c.port,
+				sleepAfter: c.sleepAfter,
+				instanceType: c.instanceType,
+				maxInstances: c.maxInstances
+			})),
+			env
+		};
+		await this.fs.writeFile(this.fs.join(root, distDir, "manifest.json"), JSON.stringify(manifest, null, 2));
+	}
 	enhanceDomain(wrangler) {
 		const domain = process.env.CLOUDFLARE_DOMAIN;
 		if (!domain) return;
@@ -2637,16 +2210,20 @@ var BuildCloudflareTask = class BuildCloudflareTask extends BuildTask {
 		}];
 	}
 	enhanceCron(ctx, wrangler) {
-		if (ctx.alepha.primitives("scheduler").length === 0) return;
+		const cronExpressions = ctx.manifest ? ctx.manifest.crons : this.discoverCrons(ctx);
+		if (cronExpressions.length === 0) return;
+		wrangler.triggers ??= {};
+		wrangler.triggers.crons = cronExpressions;
+	}
+	discoverCrons(ctx) {
+		if (ctx.alepha.primitives("scheduler").length === 0) return [];
 		let cronProvider;
 		try {
 			cronProvider = ctx.alepha.inject("CronProvider");
 		} catch {}
 		const crons = cronProvider?.getCronJobs();
-		if (!crons || crons.length === 0) return;
-		const cronExpressions = [...new Set(crons.map((c) => c.expression))];
-		wrangler.triggers ??= {};
-		wrangler.triggers.crons = cronExpressions;
+		if (!crons || crons.length === 0) return [];
+		return [...new Set(crons.map((c) => c.expression))];
 	}
 	enhanceDatabase(wrangler) {
 		if (process.env.HYPERDRIVE_ID) {
@@ -2720,18 +2297,15 @@ var BuildCloudflareTask = class BuildCloudflareTask extends BuildTask {
 		wrangler.queues.consumers.push({ queue: queueName });
 	}
 	enhanceEmail(ctx, wrangler) {
-		let provider;
+		if (ctx.manifest || !ctx.alepha) return;
 		try {
-			provider = ctx.alepha.inject(EmailProvider);
+			ctx.alepha.inject(CLOUDFLARE_EMAIL_PROVIDER_NAME);
 		} catch {
 			return;
 		}
-		if (!(provider instanceof CloudflareEmailProvider)) return;
 		wrangler.send_email = wrangler.send_email || [];
 		if (wrangler.send_email.some((b) => b.name === SEND_EMAIL_DEFAULT_BINDING)) return;
 		const entry = { name: SEND_EMAIL_DEFAULT_BINDING };
-		const destination = process.env.EMAIL_FROM;
-		if (destination) entry.destination_address = destination;
 		wrangler.send_email.push(entry);
 	}
 	/**
@@ -2744,19 +2318,45 @@ var BuildCloudflareTask = class BuildCloudflareTask extends BuildTask {
 	* `writeWorkerEntryPoint` can emit `export class <NAME> extends
 	* Container` declarations referencing them.
 	*/
-	enhanceContainers(ctx, wrangler) {
-		const primitives = ctx.alepha.primitives($container);
-		if (primitives.length === 0) return [];
-		const descriptors = primitives.map((p) => ({
+	discoverContainers(ctx) {
+		return ctx.alepha.primitives("container").map((p) => ({
 			name: p.name.toUpperCase(),
 			className: p.name.split(/[^a-zA-Z0-9]/).filter(Boolean).map((s) => s[0].toUpperCase() + s.slice(1)).join(""),
 			image: p.options.image,
 			port: p.options.port ?? 3e3,
 			sleepAfter: typeof p.options.sleepAfter === "string" ? p.options.sleepAfter : "15m",
-			instanceType: p.options.instanceType ?? "dev",
+			instanceType: p.options.instanceType === "dev" ? "lite" : p.options.instanceType ?? "lite",
 			maxInstances: p.options.maxInstances ?? 5,
 			envVars: p.options.envVars
 		}));
+	}
+	/**
+	* Expand a short image ref (e.g. `alepha-rocket:0.1.0`) into the
+	* fully-qualified `registry.cloudflare.com/<account>/<image>:<tag>`
+	* URL that wrangler validates at deploy time.
+	*
+	* Cloudflare Containers only pulls from `registry.cloudflare.com`;
+	* wrangler accepts either a Dockerfile path or a fully-qualified
+	* registry URL in the `image` field — not a bare DockerHub-style
+	* name. We let `$container({ image })` callers write the short
+	* form (it matches what `wrangler containers push <local>` accepts
+	* + matches the local docker tag) and rewrite to the CF registry
+	* URL here.
+	*
+	* Pass-through cases:
+	*   - already a full URL: starts with `registry.cloudflare.com/`
+	*     or contains a scheme/`://`
+	*   - looks like a Dockerfile path: starts with `./` or `/`
+	*/
+	resolveContainerImage(image) {
+		if (image.startsWith("./") || image.startsWith("/") || image.startsWith("registry.cloudflare.com/") || image.includes("://")) return image;
+		const accountId = process.env.CLOUDFLARE_ACCOUNT_ID;
+		if (!accountId) return image;
+		return `registry.cloudflare.com/${accountId}/${image}`;
+	}
+	enhanceContainers(ctx, wrangler) {
+		const descriptors = ctx.manifest ? ctx.manifest.containers : this.discoverContainers(ctx);
+		if (descriptors.length === 0) return [];
 		wrangler.containers = wrangler.containers || [];
 		wrangler.durable_objects = wrangler.durable_objects || {};
 		wrangler.durable_objects.bindings = wrangler.durable_objects.bindings || [];
@@ -2765,7 +2365,7 @@ var BuildCloudflareTask = class BuildCloudflareTask extends BuildTask {
 		for (const d of descriptors) {
 			wrangler.containers.push({
 				class_name: d.className,
-				image: d.image,
+				image: this.resolveContainerImage(d.image),
 				instance_type: d.instanceType,
 				max_instances: d.maxInstances
 			});
@@ -2784,9 +2384,8 @@ var BuildCloudflareTask = class BuildCloudflareTask extends BuildTask {
 	async writeWorkerEntryPoint(root, distDir, containers = []) {
 		const containerDeclarations = containers.map((c) => {
 			const envVars = c.envVars ? `  envVars = ${JSON.stringify(c.envVars)};\n` : "";
-			return `export class ${c.className} extends Container {\n  defaultPort = ${c.port};\n  sleepAfter = "${c.sleepAfter}";\n${envVars}}`;
+			return `export class ${c.className} extends globalThis.__alepha_CloudflareContainer {\n  defaultPort = ${c.port};\n  sleepAfter = "${c.sleepAfter}";\n${envVars}}`;
 		}).join("\n\n");
-		const containerImport = containers.length > 0 ? `import { Container } from "@cloudflare/containers";\n\n${containerDeclarations}\n\n` : "";
 		const workerCode = `
 import "./index.js";
 
@@ -2801,11 +2400,19 @@ const setWaitUntil = (executionCtx) => {
   }
 };
 
+// Bind the per-invocation Worker \`env\`: keep the full binding (D1, R2, KV, …)
+// in the store for providers, and lift its string values (secrets/vars like
+// PUBLIC_URL) into \`alepha.env\` so \`$env\` resolves them at runtime.
+const bindEnv = (env) => {
+  __alepha.set("cloudflare.env", env);
+  __alepha.loadEnv(env);
+};
+
 export default {
   fetch: async (request, env, executionCtx) => {
     const ctx = { req: request, res: undefined };
 
-    __alepha.set("cloudflare.env", env);
+    bindEnv(env);
     setWaitUntil(executionCtx);
 
     try {
@@ -2821,7 +2428,7 @@ export default {
   },
 
   scheduled: async (event, env, executionCtx) => {
-    __alepha.set("cloudflare.env", env);
+    bindEnv(env);
     setWaitUntil(executionCtx);
 
     try {
@@ -2838,7 +2445,7 @@ export default {
   },
 
   queue: async (batch, env, executionCtx) => {
-    __alepha.set("cloudflare.env", env);
+    bindEnv(env);
     setWaitUntil(executionCtx);
 
     try {
@@ -2859,7 +2466,8 @@ export default {
   },
 };
 `.trim();
-		await this.fs.writeFile(this.fs.join(root, distDir, "main.cloudflare.js"), `${this.warningComment}\n${containerImport}${workerCode}`.trim());
+		const containerBlock = containers.length > 0 ? `${containerDeclarations}\n\n` : "";
+		await this.fs.writeFile(this.fs.join(root, distDir, "main.cloudflare.js"), `${this.warningComment}\n${containerBlock}${workerCode}`.trim());
 	}
 };
 //#endregion
@@ -2979,6 +2587,7 @@ var BuildDockerTask = class extends BuildTask {
 			name: "generate deploy config (docker)",
 			handler: async () => {
 				const migrationsCopied = await this.copyMigrations(ctx.root, distDir);
+				const hasDeps = await this.hasRuntimeDeps(ctx.root, distDir);
 				await this.writeDockerfile(ctx.root, distDir, {
 					compile,
 					standard: {
@@ -2986,6 +2595,7 @@ var BuildDockerTask = class extends BuildTask {
 						command: dockerCommand
 					},
 					hasMigrations: migrationsCopied,
+					hasDeps,
 					install: ctx.options.docker?.install ?? []
 				});
 			}
@@ -3071,6 +2681,21 @@ var BuildDockerTask = class extends BuildTask {
 		}
 		return false;
 	}
+	/**
+	* Whether the produced `dist/package.json` declares any runtime
+	* dependencies. Alepha apps normally bundle everything into the
+	* server entry via Vite, leaving `dependencies: {}` — in which case
+	* the generated Dockerfile's `RUN npm install` is wasted work
+	* (and emits deprecation noise). Skip the line when empty.
+	*/
+	async hasRuntimeDeps(root, distDir) {
+		try {
+			const pkg = await this.fs.readJsonFile(this.fs.join(root, distDir, "package.json"));
+			return Object.keys(pkg.dependencies ?? {}).length > 0;
+		} catch {
+			return false;
+		}
+	}
 	async writeDockerfile(root, distDir, opts) {
 		const header = "# This file was automatically generated. DO NOT MODIFY.\n# Changes to this file will be lost when the code is regenerated.\n";
 		const migrationsLine = opts.hasMigrations ? "COPY migrations ./migrations\n" : "";
@@ -3086,14 +2711,12 @@ ENTRYPOINT ["/app/app"]
 `;
 		else {
 			const { image, command } = opts.standard;
-			const installLine = opts.install.length ? `RUN npm install --no-save --no-fund --no-audit ${opts.install.join(" ")}\n` : "";
 			dockerfile = `${header}FROM ${image}
 WORKDIR /app
 
 COPY . .
 
-RUN ${command === "bun" ? "bun" : "npm"} install
-${installLine}
+${opts.hasDeps ? `RUN ${command === "bun" ? "bun" : "npm"} install\n` : ""}${opts.install.length ? `RUN npm install --no-save --no-fund --no-audit ${opts.install.join(" ")}\n` : ""}
 ENV SERVER_HOST=0.0.0.0
 
 CMD ["${command}", "index.js"]
@@ -3801,6 +3424,23 @@ var BuildCommand = class {
 		$inject(BuildCompressTask)
 	];
 	/**
+	* Value aliases accepted for `--target`.
+	*
+	* These let the CLI accept short forms (e.g. `--target cf`) that are
+	* canonicalized to a real {@link BuildTarget} before they flow into the
+	* pipeline. The enum in `flags.target` must also list the alias so it
+	* passes schema validation.
+	*/
+	targetAliases = { cf: "cloudflare" };
+	/**
+	* Canonicalize a raw `--target` value, mapping any known alias
+	* (e.g. `cf` → `cloudflare`) to its real {@link BuildTarget}.
+	*/
+	resolveTarget(target) {
+		if (!target) return;
+		return this.targetAliases[target] ?? target;
+	}
+	/**
 	* Resolve the effective runtime based on target and explicit runtime flag.
 	*
 	* Some targets force a specific runtime:
@@ -3832,10 +3472,11 @@ var BuildCommand = class {
 				"docker",
 				"vercel",
 				"cloudflare",
+				"cf",
 				"static"
 			], {
 				aliases: ["t"],
-				description: "Deployment target"
+				description: "Deployment target (cf = cloudflare)"
 			})),
 			runtime: t.optional(t.enum([
 				"node",
@@ -3862,17 +3503,20 @@ var BuildCommand = class {
 			await this.scaffolder.ensureConfig(root, { tsconfigJson: true });
 			const entry = await this.boot.getAppEntry(root);
 			this.log.trace("Entry file found", { entry });
-			this.alepha.store.mut(buildOptions, (current) => ({
-				...current,
-				stats: flags.stats ?? current.stats ?? false,
-				target: flags.target ?? current.target,
-				runtime: this.resolveRuntime(flags.target ?? current.target, flags.runtime ?? current.runtime),
-				...flags.compile !== void 0 && { docker: {
-					...current.docker,
-					compile: flags.compile ? current.docker?.compile ?? true : false
-				} },
-				...flags.sitemap && { sitemap: { hostname: flags.sitemap } }
-			}));
+			this.alepha.store.mut(buildOptions, (current) => {
+				const target = this.resolveTarget(flags.target) ?? current.target;
+				return {
+					...current,
+					stats: flags.stats ?? current.stats ?? false,
+					target,
+					runtime: this.resolveRuntime(target, flags.runtime ?? current.runtime),
+					...flags.compile !== void 0 && { docker: {
+						...current.docker,
+						compile: flags.compile ? current.docker?.compile ?? true : false
+					} },
+					...flags.sitemap && { sitemap: { hostname: flags.sitemap } }
+				};
+			});
 			const options = this.options;
 			const distDir = options.output?.dist ?? "dist";
 			if (!flags.prebuilt) await run.rm(distDir, { alias: "clean dist" });
@@ -3886,23 +3530,30 @@ var BuildCommand = class {
 				target,
 				runtime: options.runtime
 			});
+			let manifest = null;
+			if (flags.prebuilt) manifest = await this.loadManifest(root);
 			let appAlepha;
 			let hasClient = false;
-			await run({
-				name: "analyze app",
-				handler: async () => {
-					appAlepha = await this.viteBuildProvider.init({ entry });
-					hasClient = this.viteBuildProvider.hasClient();
-				}
-			});
-			if (!appAlepha) throw new AlephaError("Alepha instance not found");
+			if (!manifest) {
+				await run({
+					name: "analyze app",
+					handler: async () => {
+						appAlepha = await this.viteBuildProvider.init({ entry });
+						hasClient = this.viteBuildProvider.hasClient();
+					}
+				});
+				if (!appAlepha) throw new AlephaError("Alepha instance not found");
+			}
+			const platformOptions = this.alepha.store.get("alepha.cli.platform.options") ?? null;
 			const ctx = {
-				alepha: appAlepha,
+				alepha: appAlepha ?? null,
 				options,
 				root,
 				run,
 				entry,
 				hasClient,
+				manifest,
+				platformOptions,
 				flags: {
 					image: flags.image,
 					prebuilt: flags.prebuilt
@@ -3911,6 +3562,21 @@ var BuildCommand = class {
 			for (const task of this.pipeline) await task.run(ctx);
 		}
 	});
+	/**
+	* Read `dist/manifest.json` produced by a previous `alepha build`.
+	* Returns null when absent or unparseable — caller falls back to the
+	* Vite-introspection path.
+	*/
+	async loadManifest(root) {
+		try {
+			const fs = await import("node:fs/promises");
+			const path = await import("node:path");
+			const raw = await fs.readFile(path.join(root, "dist", "manifest.json"), "utf-8");
+			return JSON.parse(raw);
+		} catch {
+			return null;
+		}
+	}
 };
 //#endregion
 //#region ../../src/cli/core/commands/clean.ts
@@ -4506,8 +4172,10 @@ var ViteDevServerProvider = class {
 			handleHotUpdate: async (ctx) => {
 				if (/[/\\]\.idea[/\\]/.test(ctx.file)) return [];
 				if (this.waitingForRetry) return [];
-				const firstModule = ctx.modules[0];
-				if (firstModule && !firstModule._ssrModule) return;
+				if (!/\.(tsx|jsx)$/.test(ctx.file)) {
+					const firstModule = ctx.modules[0];
+					if (firstModule && !firstModule._ssrModule) return;
+				}
 				this.changedFiles.add(ctx.file);
 				if (/\.(tsx|jsx)$/.test(ctx.file)) {
 					if (this.reloadDebounceTimer) {
@@ -4702,7 +4370,17 @@ if (import.meta.hot) {
 		process.env.SERVER_PORT ??= `${port}`;
 	}
 	/**
-	* Invalidate modules and all their importers.
+	* Invalidate modules and all their importers, across both client and
+	* SSR module graphs.
+	*
+	* Vite registers a file under multiple module ids (one per query
+	* variant — e.g. `?v=…`, `?import` and the bare path), and `getModuleById`
+	* only matches one. For workspace-linked source files (`@alepha/ui/...`)
+	* the SSR-graph entry is keyed by the absolute path while the client
+	* may use the package-qualified id. `getModulesByFile` returns every
+	* variant Vite knows about for a given absolute path — invalidating
+	* each catches both halves of the dual graph and prevents stale SSR
+	* compiled exports from surviving across edits.
 	*/
 	invalidateModulesWithImporters(changedFiles) {
 		const graph = this.server.moduleGraph;
@@ -4711,11 +4389,16 @@ if (import.meta.hot) {
 		while (queue.length > 0) {
 			const file = queue.pop();
 			if (invalidated.has(file)) continue;
-			const mod = this.server.moduleGraph.getModuleById(file);
-			if (!mod) continue;
-			graph.invalidateModule(mod);
 			invalidated.add(file);
-			for (const importer of mod.importers) if (importer.id && !invalidated.has(importer.id)) queue.push(importer.id);
+			const mods = new Set([...graph.getModulesByFile(file) ?? [], ...graph.getModuleById(file) ? [graph.getModuleById(file)] : []]);
+			if (mods.size === 0) continue;
+			for (const mod of mods) {
+				graph.invalidateModule(mod);
+				for (const importer of mod.importers) {
+					const key = importer.file ?? importer.id;
+					if (key && !invalidated.has(key)) queue.push(key);
+				}
+			}
 		}
 		const entryPath = this.options.entry.server;
 		const absoluteEntryPath = join(this.options.root, entryPath);
@@ -5299,8 +4982,6 @@ var InitCommand = class {
 				description: "Include React dependencies and web module (src/web/)"
 			})),
 			tailwind: t.optional(t.boolean({ description: "Include Tailwind CSS with Vite plugin. Implies --react" })),
-			shadcn: t.optional(t.union([t.boolean(), t.text()], { description: "Set up shadcn/ui (components.json, cn helper, theme tokens, alepha registry). Pass an optional preset id (default: b0). Implies --react and --tailwind" })),
-			saas: t.optional(t.union([t.boolean(), t.text()], { description: "Scaffold a SaaS starter: auth (login/register/reset/verify) + admin panel (/admin AppShell with users/sessions/api-keys/parameters/audits). Pass an optional preset id (default: b0). Implies --shadcn and --api" })),
 			force: t.optional(t.boolean({
 				aliases: ["f"],
 				description: "Override existing files"
@@ -5334,6 +5015,86 @@ var LintCommand = class {
 	});
 };
 //#endregion
+//#region ../../src/cli/core/commands/pack.ts
+/**
+* Pack the workspace into a deployable `tar.gz`.
+*
+* The tar contains everything a remote runner (Alepha Rocket, or any
+* `alepha platform <op> --prebuilt` consumer) needs to deploy the app:
+*
+*   dist/                 pre-built output (incl. manifest.json)
+*   migrations/           SQL files (if present)
+*
+* No source, no `alepha.config.ts`, no `package.json` — the deploy
+* side reads everything from `dist/manifest.json` and never touches
+* source. Excludes: `node_modules`, `.DS_Store`, macOS AppleDouble
+* (`._*`), `.alepha` build cache, `e2e`, `playwright-report`,
+* `coverage`.
+*
+* Output name: `<project-name>-<tag>.tar.gz` (default tag
+* "latest"). Project name comes from `package.json.name`. Naming
+* mirrors Docker tags — same artifact, different tag = different
+* file.
+*/
+var PackCommand = class {
+	log = $logger();
+	fs = $inject(FileSystemProvider);
+	shell = $inject(ShellProvider);
+	pack = $command({
+		name: "pack",
+		description: "Pack the workspace into a deployable tar.gz (for `alepha platform --prebuilt` consumers like Alepha Rocket).",
+		flags: t.object({
+			tag: t.optional(t.text({
+				aliases: ["t"],
+				description: "Tag suffix for the artifact name (Docker-style). Defaults to `latest` → `<project>-latest.tar.gz`. Pass a real version like `0.0.2` for a pinned artifact."
+			})),
+			output: t.optional(t.text({
+				aliases: ["o"],
+				description: "Output directory for the tar.gz (default: current dir)."
+			}))
+		}),
+		handler: async ({ flags, root, run }) => {
+			const pkgPath = this.fs.join(root, "package.json");
+			let project;
+			try {
+				const pkg = await this.fs.readJsonFile(pkgPath);
+				if (!pkg.name) throw new AlephaError("Missing \"name\" in package.json — `alepha pack` needs it for the artifact filename.");
+				project = pkg.name;
+			} catch (err) {
+				if (err instanceof AlephaError) throw err;
+				throw new AlephaError(`Could not read package.json at ${pkgPath}. Run \`alepha pack\` from a workspace directory.`);
+			}
+			const tag = flags.tag ?? "latest";
+			const outputDir = flags.output ?? root;
+			const filename = `${project}-${tag}.tar.gz`;
+			const outputPath = this.fs.join(outputDir, filename);
+			const candidates = ["dist", "migrations"];
+			const includes = [];
+			for (const candidate of candidates) if (await this.fs.exists(this.fs.join(root, candidate))) includes.push(candidate);
+			if (!includes.includes("dist")) throw new AlephaError("dist/ missing — run `alepha build --target=cloudflare` before `alepha pack`.");
+			const manifestPath = this.fs.join(root, "dist", "manifest.json");
+			if (!await this.fs.exists(manifestPath)) throw new AlephaError(`dist/manifest.json missing — required for prebuilt deploys. Rebuild with the current alepha version (\`alepha build --target=cloudflare\`).`);
+			const cmd = `sh -c "COPYFILE_DISABLE=1 ${`tar -czf '${outputPath}' ${[
+				"node_modules",
+				".DS_Store",
+				"._*",
+				".alepha",
+				"e2e",
+				"playwright-report",
+				"test-results",
+				"coverage"
+			].map((p) => `--exclude='${p}'`).join(" ")} ${includes.map((p) => `'${p}'`).join(" ")}`}"`;
+			await run({
+				name: `pack → ${filename}`,
+				handler: async () => {
+					await this.shell.run(cmd, { root });
+				}
+			});
+			this.log.info(`Packed ${filename} → ${outputPath}`);
+		}
+	});
+};
+//#endregion
 //#region ../../src/cli/core/commands/root.ts
 var RootCommand = class {
 	log = $logger();
@@ -5497,6 +5258,7 @@ const AlephaCli = $module({
 		DevCommand,
 		InitCommand,
 		LintCommand,
+		PackCommand,
 		RootCommand,
 		TestCommand,
 		TypecheckCommand,
@@ -5515,6 +5277,6 @@ const AlephaCli = $module({
 	]
 });
 //#endregion
-export { AlephaCli, AlephaCliExtensionProvider, AlephaCliServices, AlephaCliUtils, AppEntryProvider, BuildAssetsTask, BuildClientTask, BuildCloudflareTask, BuildCommand, BuildCompressTask, BuildDockerTask, BuildPrerenderTask, BuildServerTask, BuildSitemapTask, BuildStaticTask, BuildTask, BuildVercelTask, ChangelogCommand, CleanCommand, DEFAULT_IGNORE, DbCommand, DevCommand, GitMessageParser, GitProvider, InitCommand, LintCommand, OpenApiCommand, PackageManagerUtils, ProjectScaffolder, RootCommand, TestCommand, TypecheckCommand, VerifyCommand, ViteBuildProvider, ViteDevServerProvider, ViteUtils, alephaPackageJson, appEntryOptions, buildOptions, changelogOptions, devOptions, version };
+export { AlephaCli, AlephaCliExtensionProvider, AlephaCliServices, AlephaCliUtils, AppEntryProvider, BuildAssetsTask, BuildClientTask, BuildCloudflareTask, BuildCommand, BuildCompressTask, BuildDockerTask, BuildPrerenderTask, BuildServerTask, BuildSitemapTask, BuildStaticTask, BuildTask, BuildVercelTask, ChangelogCommand, CleanCommand, DEFAULT_IGNORE, DbCommand, DevCommand, GitMessageParser, GitProvider, InitCommand, LintCommand, OpenApiCommand, PackCommand, PackageManagerUtils, ProjectScaffolder, RootCommand, TestCommand, TypecheckCommand, VerifyCommand, ViteBuildProvider, ViteDevServerProvider, ViteUtils, alephaPackageJson, appEntryOptions, buildOptions, changelogOptions, devOptions, version };
 
 //# sourceMappingURL=index.js.map