anhedral 0.10.0 → 0.10.1

package/dist/scaffold/styling.js

@@ -0,0 +1,84 @@
+import { json, patchPackage, put, readJson } from './files.js';
+/** Shared data and a Tailwind v3 preset for Expo/NativeWind and WXT. */
+export function scaffoldStyling({ root }) {
+    put(root, 'packages/styling/src/tokens.cjs', `exports.light = {
+  '--background': '0 0% 100%',
+  '--foreground': '0 0% 9%',
+  '--card': '0 0% 100%',
+  '--card-foreground': '0 0% 9%',
+  '--popover': '0 0% 100%',
+  '--popover-foreground': '0 0% 9%',
+  '--primary': '0 0% 9%',
+  '--primary-foreground': '0 0% 98%',
+  '--secondary': '0 0% 96.1%',
+  '--secondary-foreground': '0 0% 9%',
+  '--muted': '0 0% 96.1%',
+  '--muted-foreground': '0 0% 45.1%',
+  '--accent': '0 0% 96.1%',
+  '--accent-foreground': '0 0% 9%',
+  '--destructive': '0 84.2% 60.2%',
+  '--destructive-foreground': '0 0% 98%',
+  '--border': '0 0% 89.8%',
+  '--input': '0 0% 89.8%',
+  '--ring': '0 0% 63.9%',
+  '--radius': '0.5rem',
+};
+
+exports.dark = {
+  ...exports.light,
+  '--background': '0 0% 9%',
+  '--foreground': '0 0% 98%',
+  '--card': '0 0% 9%',
+  '--card-foreground': '0 0% 98%',
+  '--popover': '0 0% 9%',
+  '--popover-foreground': '0 0% 98%',
+  '--primary': '0 0% 98%',
+  '--primary-foreground': '0 0% 9%',
+  '--secondary': '0 0% 14.9%',
+  '--secondary-foreground': '0 0% 98%',
+  '--muted': '0 0% 14.9%',
+  '--muted-foreground': '0 0% 63.9%',
+  '--accent': '0 0% 14.9%',
+  '--accent-foreground': '0 0% 98%',
+  '--destructive': '0 70.9% 59.4%',
+  '--border': '0 0% 14.9%',
+  '--input': '0 0% 14.9%',
+};
+
+exports.spacing = { small: 4, medium: 8, large: 16 };
+`);
+    put(root, 'packages/styling/tailwind.cjs', `const { light, dark } = require('./src/tokens.cjs');
+const color = (name) => 'hsl(var(--' + name + '))';
+const surface = (name) => ({ DEFAULT: color(name), foreground: color(name + '-foreground') });
+
+module.exports = {
+  darkMode: 'class',
+  theme: {
+    extend: {
+      colors: {
+        border: color('border'), input: color('input'), ring: color('ring'),
+        background: color('background'), foreground: color('foreground'),
+        primary: surface('primary'), secondary: surface('secondary'),
+        destructive: surface('destructive'), muted: surface('muted'),
+        accent: surface('accent'), popover: surface('popover'), card: surface('card'),
+      },
+      borderRadius: {
+        lg: 'var(--radius)', md: 'calc(var(--radius) - 2px)', sm: 'calc(var(--radius) - 4px)',
+      },
+    },
+  },
+  plugins: [function themeVariables({ addBase }) {
+    addBase({ ':root': light, '.dark:root': dark });
+  }],
+};
+`);
+    patchPackage(root, 'packages/styling/package.json', {
+        exports: { '.': './src/index.ts', './tailwind': './tailwind.cjs' },
+    });
+    const config = readJson(root, 'packages/styling/tsconfig.json');
+    json(root, 'packages/styling/tsconfig.json', {
+        ...config,
+        compilerOptions: { ...config.compilerOptions, allowJs: true },
+        include: ['src/**/*.ts', 'src/**/*.cjs', 'tailwind.cjs'],
+    });
+}

package/dist/scaffold/web.js

@@ -1,4 +1,6 @@
-import { STACK_DEPENDENCIES } from '../dependencies.js';
+import { resourceName } from '../render.js';
+import { writeEnvironmentFile } from './environment.js';
+import { STACK_DEPENDENCIES, NEXT_VERCEL_VERSION, NEXT_OPENNEXT_VERSION } from '../dependencies.js';
 import { existsSync, readFileSync, readdirSync, rmSync } from 'node:fs';
 import path from 'node:path';
 import { configureVinext } from '../vinext.js';
@@ -46,10 +48,28 @@ function cleanShadcnStarter(root) {
     const themePath = 'apps/web/components/theme-provider.tsx';
     if (existsSync(path.join(root, themePath))) {
         const source = readFileSync(path.join(root, themePath), 'utf8');
-        // Preserve the upstream keyboard behavior while reducing branching in its guards.
-        put(root, themePath, source
+        const updated = source
             .replace(/target.tagName === "INPUT" \|\|\s*target.tagName === "TEXTAREA" \|\|\s*target.tagName === "SELECT"/, '["INPUT", "TEXTAREA", "SELECT"].includes(target.tagName)')
-            .replace(/if \(event.defaultPrevented \|\| event.repeat\) \{\s*return\s*\}\s*if \(event.metaKey \|\| event.ctrlKey \|\| event.altKey\) \{\s*return\s*\}\s*if \(event.key.toLowerCase\(\) !== "d"\) \{\s*return\s*\}\s*if \(isTypingTarget\(event.target\)\) \{\s*return\s*\}/, 'if ([event.defaultPrevented, event.repeat, event.metaKey, event.ctrlKey, event.altKey, event.key.toLowerCase() !== "d", isTypingTarget(event.target)].some(Boolean)) { return }'));
+            .replace(/if \(event.defaultPrevented \|\| event.repeat\) \{\s*return\s*\}\s*if \(event.metaKey \|\| event.ctrlKey \|\| event.altKey\) \{\s*return\s*\}\s*if \(event.key.toLowerCase\(\) !== "d"\) \{\s*return\s*\}\s*if \(isTypingTarget\(event.target\)\) \{\s*return\s*\}/, 'if (!isThemeShortcut(event) || isTypingTarget(event.target)) return');
+        // Group modifier handling while preserving short-circuiting and avoiding guard arrays.
+        const modifierHelper = `function hasShortcutModifier(event: KeyboardEvent) {
+  return event.metaKey || event.ctrlKey || event.altKey
+}
+
+function isThemeShortcut(event: KeyboardEvent) {
+  if (event.defaultPrevented || event.repeat) return false
+  return !hasShortcutModifier(event) && event.key.toLowerCase() === "d"
+}
+
+`;
+        const needsModifierHelper = updated.includes('isThemeShortcut(event)') &&
+            !updated.includes('function hasShortcutModifier(');
+        const content = needsModifierHelper
+            ? updated.replace(/(?:export )?function ThemeProvider\b/, (declaration) => modifierHelper + declaration)
+            : updated;
+        if (needsModifierHelper && content === updated)
+            throw new Error('The upstream theme provider changed; review its shortcut integration.');
+        put(root, themePath, content);
     }
 }
 export function scaffoldWeb({ root, options, bindings, runtimeApp, has }) {
@@ -59,28 +79,28 @@ export function scaffoldWeb({ root, options, bindings, runtimeApp, has }) {
         scripts: { typecheck: 'tsc --noEmit', lint: 'eslint . --max-warnings 0' },
     });
     if (has('vinext')) {
-        configureVinext(root, `${options.name}-web`, runtimeApp === 'web' ? bindings : {});
+        configureVinext(root, resourceName(options.name, 'web'), runtimeApp === 'web' ? bindings : {});
     }
     else if (options.hosting === 'cloudflare') {
         patchPackage(root, 'apps/web/package.json', {
             dependencies: {
                 '@opennextjs/cloudflare': STACK_DEPENDENCIES['@opennextjs/cloudflare'],
-                next: '16.3.8',
+                next: NEXT_OPENNEXT_VERSION,
             },
             devDependencies: { wrangler: STACK_DEPENDENCIES['wrangler'] },
             scripts: {
-                preview: 'opennextjs-cloudflare build && opennextjs-cloudflare preview',
+                preview: 'opennextjs-cloudflare build && opennextjs-cloudflare preview --port 3000',
                 deploy: 'opennextjs-cloudflare build && opennextjs-cloudflare deploy',
                 'build:worker': 'opennextjs-cloudflare build',
                 'cf:typegen': 'wrangler types --env-interface CloudflareEnv cloudflare-env.d.ts',
             },
         });
         json(root, 'apps/web/wrangler.jsonc', {
-            ...workerConfig(`${options.name}-web`),
+            ...workerConfig(resourceName(options.name, 'web')),
             compatibility_flags: ['nodejs_compat', 'global_fetch_strictly_public'],
             main: '.open-next/worker.js',
             assets: { directory: '.open-next/assets', binding: 'ASSETS' },
-            services: [{ binding: 'WORKER_SELF_REFERENCE', service: `${options.name}-web` }],
+            services: [{ binding: 'WORKER_SELF_REFERENCE', service: resourceName(options.name, 'web') }],
             ...(runtimeApp === 'web' ? bindings : {}),
         });
         const nextConfig = ['next.config.ts', 'next.config.mjs', 'next.config.js'].find((file) => existsSync(path.join(root, 'apps/web', file)));
@@ -90,10 +110,10 @@ export function scaffoldWeb({ root, options, bindings, runtimeApp, has }) {
         }
         put(root, 'apps/web/open-next.config.ts', 'import { defineCloudflareConfig } from "@opennextjs/cloudflare";\nexport default defineCloudflareConfig();\n');
         put(root, 'apps/web/public/_headers', '/_next/static/*\n  Cache-Control: public,max-age=31536000,immutable\n');
-        put(root, 'apps/web/.dev.vars.example', 'NEXTJS_ENV=development\n');
+        writeEnvironmentFile(root, 'apps/web/.dev.vars.example', { NEXTJS_ENV: 'development' });
     }
     else {
-        patchPackage(root, 'apps/web/package.json', { dependencies: { next: '16.4.0' } });
+        patchPackage(root, 'apps/web/package.json', { dependencies: { next: NEXT_VERCEL_VERSION } });
         put(root, 'apps/web/next.config.ts', 'import type { NextConfig } from "next";\nconst config: NextConfig = { transpilePackages: ["@workspace/ui"], cacheComponents: true, partialPrefetching: true };\nexport default config;\n');
         for (const file of ['next.config.js', 'next.config.mjs'])
             rmSync(path.join(root, 'apps/web', file), { force: true });

package/dist/scaffold/workspace.js

@@ -1,4 +1,4 @@
-import { STACK_DEPENDENCIES } from '../dependencies.js';
+import { STACK_DEPENDENCIES, WORKSPACE_NODE_ENGINE } from '../dependencies.js';
 import { setPnpmPolicy } from '../pnpm-policy.js';
 import { writeSecurityBackports } from '../security-backports.js';
 import { BOOTSTRAP_COMMAND } from '../registry/bootstrap.js';
@@ -7,14 +7,16 @@ import { PACKAGE_MANAGER } from '../dependencies.js';
 import { createSetupPlan } from '../capabilities.js';
 import { json, put, readJson, patchPackage, } from './files.js';
 import { writeSetupDocumentation, workerBuildSuffix } from './documentation.js';
+import { writeStackDocumentation } from './stack-documentation.js';
 import { writeEnvironmentExample } from './environment.js';
-export function writeStandardRoot(root, options, registry, updating = false) {
+function securityOverrides(options) {
     const has = (value) => options.products.includes(value);
-    const existing = readJson(root, 'package.json');
-    const securityOverrides = {
+    return {
         ...(has('wxt') ? { '@wxt-dev/module-react>@vitejs/plugin-react': '5.2.0' } : {}),
         ...(has('next') || has('vinext') ? { 'sharp@<0.35.5': '0.35.5' } : {}),
-        'source-map-js@<1.2.2': '1.2.2',
+        ...(options.products.some((product) => ['vinext', 'next', 'expo', 'electron', 'wxt', 'neon', 'd1'].includes(product))
+            ? { 'source-map-js@<1.2.2': '1.2.2' }
+            : {}),
         ...(has('next') && options.hosting === 'cloudflare'
             ? { 'glob@>=10.2.0 <10.5.0': '10.5.0', 'glob@>=11.0.0 <11.1.0': '11.1.0' }
             : {}),
@@ -34,11 +36,34 @@ export function writeStandardRoot(root, options, registry, updating = false) {
         'brace-expansion@>=3 <4': '3.0.9',
         'brace-expansion@>=4 <5.0.12': '5.0.12',
     };
+}
+function writeTurboConfiguration(root, registry) {
+    const turbo = readJson(root, 'turbo.json');
+    turbo.globalEnv = [
+        ...new Set([...(turbo.globalEnv ?? []), ...registry.items.flatMap((item) => item.environment)]),
+    ].sort();
+    turbo.tasks = {
+        ...turbo.tasks,
+        dev: { ...turbo.tasks.dev, cache: false, persistent: true },
+        lint: { ...turbo.tasks.lint, dependsOn: ['^lint'] },
+        typecheck: { ...turbo.tasks.typecheck, dependsOn: ['^typecheck'] },
+        test: { dependsOn: ['^build'], outputs: ['coverage/**'] },
+        build: {
+            ...turbo.tasks.build,
+            dependsOn: [...new Set(['^build', ...(turbo.tasks.build?.dependsOn ?? [])])],
+            outputs: ['.next/**', '!.next/cache/**', '.open-next/**', 'dist/**', '.output/**'],
+        },
+    };
+    json(root, 'turbo.json', turbo);
+}
+export function writeStandardRoot(root, options, registry, updating = false) {
+    const has = (value) => options.products.includes(value);
+    const existing = readJson(root, 'package.json');
     patchPackage(root, 'package.json', {
         name: options.name,
         private: true,
         packageManager: PACKAGE_MANAGER,
-        engines: { node: '>=22.13.0' },
+        engines: { node: WORKSPACE_NODE_ENGINE },
         scripts: {
             dev: 'turbo dev',
             build: 'turbo build',
@@ -55,7 +80,10 @@ export function writeStandardRoot(root, options, registry, updating = false) {
         },
         devDependencies: { fallow: STACK_DEPENDENCIES['fallow'] },
         // Upstream starter lockfiles can retain vulnerable transitive versions. Keep fixes within compatible majors.
-        pnpm: { ...existing.pnpm, overrides: { ...existing.pnpm?.overrides, ...securityOverrides } },
+        pnpm: {
+            ...existing.pnpm,
+            overrides: { ...existing.pnpm?.overrides, ...securityOverrides(options) },
+        },
     });
     put(root, 'scripts/audit.mjs', `import { spawnSync } from 'node:child_process';
 const base = process.env.AUDIT_BASE;
@@ -90,21 +118,7 @@ process.exitCode = result.status ?? 1;
             '**/cloudflare-env.d.ts',
         ],
     });
-    const turbo = readJson(root, 'turbo.json');
-    turbo.globalEnv = [...new Set(registry.items.flatMap((item) => item.environment))].sort();
-    turbo.tasks = {
-        ...turbo.tasks,
-        dev: { ...turbo.tasks.dev, cache: false, persistent: true },
-        lint: { ...turbo.tasks.lint, dependsOn: ['^lint'] },
-        typecheck: { ...turbo.tasks.typecheck, dependsOn: ['^typecheck'] },
-        test: { dependsOn: ['^build'], outputs: ['coverage/**'] },
-        build: {
-            ...turbo.tasks.build,
-            dependsOn: [...new Set(['^build', ...(turbo.tasks.build?.dependsOn ?? [])])],
-            outputs: ['.next/**', '!.next/cache/**', '.open-next/**', 'dist/**', '.output/**'],
-        },
-    };
-    json(root, 'turbo.json', turbo);
+    writeTurboConfiguration(root, registry);
     setPnpmPolicy(root, {
         allowBuilds: undefined,
         onlyBuiltDependencies: [
@@ -128,8 +142,10 @@ process.exitCode = result.status ?? 1;
         '!.env.example',
         '.fallow/',
         '.anhedral/',
+        '.anhedral-audit-report.json',
     ]);
     writeEnvironmentExample(root, registry);
+    writeStackDocumentation(root, registry);
     json(root, 'anhedral.standard.json', {
         schemaVersion: 1,
         standard: 'anhedral-application-stack',

package/dist/stack-registry.d.ts

@@ -30,7 +30,7 @@ declare const PRODUCT_ITEMS: {
     styling: ItemDefinition;
 };
 export type StandardProduct = keyof typeof PRODUCT_ITEMS;
-export declare const STANDARD_PRODUCTS: readonly ("realtime" | "electron" | "wxt" | "expo" | "next" | "vinext" | "hono" | "neon" | "better-auth" | "queues" | "workflows" | "d1" | "local-data" | "clerk" | "r2" | "kv" | "cron" | "openai" | "ai-sdk" | "workers-ai" | "resend" | "stripe" | "revenuecat" | "sentry" | "basin" | "posthog" | "styling")[];
+export declare const STANDARD_PRODUCTS: readonly ("realtime" | "electron" | "wxt" | "expo" | "vinext" | "next" | "workflows" | "styling" | "hono" | "neon" | "d1" | "local-data" | "clerk" | "better-auth" | "r2" | "kv" | "queues" | "cron" | "openai" | "ai-sdk" | "workers-ai" | "resend" | "stripe" | "revenuecat" | "sentry" | "basin" | "posthog")[];
 declare const DEFINITIONS: {
     vinext: ItemDefinition;
     next: ItemDefinition;
@@ -67,7 +67,7 @@ declare const DEFINITIONS: {
 export type StackItemId = keyof typeof DEFINITIONS;
 export declare function getStackDefinition(name: string): ItemDefinition;
 export declare function getStackItem(name: string): StackRegistryItem;
-export declare const STACK_ITEMS: Record<"realtime" | "electron" | "eslint" | "typescript" | "wxt" | "expo" | "next" | "vinext" | "hono" | "neon" | "better-auth" | "queues" | "workflows" | "workspace" | "ui" | "d1" | "local-data" | "clerk" | "r2" | "kv" | "cron" | "openai" | "ai-sdk" | "workers-ai" | "resend" | "stripe" | "revenuecat" | "sentry" | "basin" | "posthog" | "styling", StackRegistryItem>;
+export declare const STACK_ITEMS: Record<"realtime" | "electron" | "eslint" | "typescript" | "wxt" | "expo" | "vinext" | "next" | "workflows" | "ui" | "workspace" | "styling" | "hono" | "neon" | "d1" | "local-data" | "clerk" | "better-auth" | "r2" | "kv" | "queues" | "cron" | "openai" | "ai-sdk" | "workers-ai" | "resend" | "stripe" | "revenuecat" | "sentry" | "basin" | "posthog", StackRegistryItem>;
 export declare const STACK_REGISTRY: {
     schemaVersion: number;
     name: string;

package/dist/stack-registry.js

@@ -1,3 +1,5 @@
+import { scaffoldStyling } from './scaffold/styling.js';
+import { resourceName } from './render.js';
 import { STACK_DEPENDENCIES } from './dependencies.js';
 import { dependencyOrder } from './dependency-order.js';
 import { GENERATOR_VERSION } from './version.js';
@@ -55,7 +57,7 @@ const PRODUCT_ITEMS = defineItems({
         type: 'application',
         description: 'Expo mobile application with native UI',
         targets: ['apps/mobile'],
-        registryDependencies: ['workspace', 'typescript', 'eslint'],
+        registryDependencies: ['workspace', 'typescript', 'eslint', 'styling'],
         setup: requirements('Mobile application', ['Expo/EAS CLI', 'Xcode or Android SDK'], ['Client-owned Apple/Google developer accounts for store delivery'], ['Platform signing credentials; EAS access when used'], ['Expo app; native adapters, signing, store configuration'], ['Native simulator/device flows and signed native build; web export alone is insufficient']),
         install: scaffoldExpo,
     },
@@ -71,7 +73,7 @@ const PRODUCT_ITEMS = defineItems({
         type: 'application',
         description: 'WXT browser side-panel extension',
         targets: ['apps/extension'],
-        registryDependencies: ['workspace', 'typescript', 'eslint'],
+        registryDependencies: ['workspace', 'typescript', 'eslint', 'styling'],
         setup: requirements('Chrome side-panel extension', ['Chrome', 'WXT'], ['Extension store publisher access for distribution'], ['Store publishing credentials when required'], ['Extension app; minimal browser permissions and store package'], ['Installed side panel, background/content messaging and permission behavior']),
         install: scaffoldWxt,
     },
@@ -106,7 +108,7 @@ const PRODUCT_ITEMS = defineItems({
             d1_databases: [
                 {
                     binding: 'DB',
-                    database_name: `${options.name}-db`,
+                    database_name: resourceName(options.name, 'db'),
                     database_id: 'REPLACE_WITH_D1_ID',
                     migrations_dir: '../../packages/db/migrations',
                 },
@@ -120,7 +122,12 @@ const PRODUCT_ITEMS = defineItems({
         targets: ['packages/local-data'],
         registryDependencies: ['workspace', 'typescript', 'eslint'],
         setup: requirements('Device-local SQLite and files', ['Selected platform database/filesystem tooling'], [], [], ['Integration boundary; implement platform adapters and explicit synchronization if needed'], ['Persistence, offline writes and recovery on the selected device']),
-        package: packageSource('local-data', '// Device-local SQLite and filesystem need platform-specific adapters.\nexport interface LocalDataStore { read(key: string): Promise<string | null>; write(key: string, value: string): Promise<void>; }\n', {}),
+        package: packageSource('local-data', `// Device-local SQLite and filesystem need platform-specific adapters.
+export interface LocalDataStore {
+  read(key: string): Promise<string | null>;
+  write(key: string, value: string): Promise<void>;
+}
+`, {}),
     },
     clerk: {
         type: 'integration',
@@ -130,7 +137,12 @@ const PRODUCT_ITEMS = defineItems({
         registryDependencies: ['workspace', 'typescript', 'eslint'],
         setup: requirements('Managed identity', ['Clerk integration or dashboard'], ['Client-owned Clerk project access'], ['Clerk publishable key; server secret key; webhook secret when used'], ['Identity project, allowed URLs, SDK setup and protected routes'], ['Sign-in/out, session expiry, resource authorization and selected native client flows']),
         install: scaffoldClerk,
-        environment: ['NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY', 'CLERK_SECRET_KEY'],
+        environment: ['NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY', 'CLERK_PUBLISHABLE_KEY', 'CLERK_SECRET_KEY'],
+        resolveEnvironment: ({ has }) => [
+            'CLERK_SECRET_KEY',
+            ...(has('vinext') || has('next') ? ['NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY'] : []),
+            ...(has('hono') ? ['CLERK_PUBLISHABLE_KEY'] : []),
+        ],
         runtime: 'server',
         resolveDependencies: ({ has }) => ['vinext', 'next', 'hono'].filter((id) => has(id)),
         resolveTargets: ({ has }) => [
@@ -162,7 +174,7 @@ const PRODUCT_ITEMS = defineItems({
         ]),
         install: scaffoldPrivateFiles,
         configure: ({ options }) => ({
-            r2_buckets: [{ binding: 'FILES', bucket_name: `${options.name}-private-files` }],
+            r2_buckets: [{ binding: 'FILES', bucket_name: resourceName(options.name, 'private-files') }],
         }),
         runtime: 'worker',
         resolveTargets: ({ runtimeApp }) => [`apps/${runtimeApp}/private-files.md`],
@@ -194,7 +206,7 @@ const PRODUCT_ITEMS = defineItems({
         setup: requirements('Deferred jobs', ['Wrangler'], ['Cloudflare Queues configuration access'], [], ['Queue, producer/consumer bindings and failure handling'], ['Retries, idempotency, concurrency and dead-letter recovery']),
         install: scaffoldQueues,
         configure: ({ options }) => ({
-            queues: { producers: [{ binding: 'JOBS', queue: `${options.name}-jobs` }] },
+            queues: { producers: [{ binding: 'JOBS', queue: resourceName(options.name, 'jobs') }] },
         }),
         runtime: 'optional-worker',
         resolveTargets: ({ runtimeApp, has }) => [
@@ -298,7 +310,9 @@ const PRODUCT_ITEMS = defineItems({
             'Basin dataset/stream, ANALYTICS binding, optional private R2 sink and authorized sink writes',
         ], ['Private ingestion, event delivery, query results and archive retrieval when selected']),
         package: packageSource('analytics', `export interface EventStream { send(events: Record<string, unknown>[]): Promise<void> }
-export async function recordEvents(stream: EventStream, events: Record<string, unknown>[]) { await stream.send(events); }
+export async function recordEvents(stream: EventStream, events: Record<string, unknown>[]) {
+  await stream.send(events);
+}
 `, {}),
         resolvePackage: ({ has }, recipe) => ({
             ...recipe,
@@ -325,8 +339,21 @@ export async function recordEvents(stream: EventStream, events: Record<string, u
         description: 'Shared platform-independent styling tokens',
         targets: ['packages/styling'],
         registryDependencies: ['workspace', 'typescript', 'eslint'],
-        setup: requirements('Shared styling definitions', [], [], [], ['Styling package; implement actual shared colors, typography, spacing and themes'], ['Consistency across selected interfaces; preserve platform-specific components']),
-        package: packageSource('styling', "export const styling = { colors: { foreground: '#171717', background: '#ffffff' }, spacing: { small: 4, medium: 8, large: 16 } } as const;\n", {}),
+        setup: requirements('Shared styling definitions', [], [], [], [
+            'Shared light/dark tokens and Tailwind v3 preset for Expo/WXT; adapt platform typography and components',
+        ], ['Consistency across selected interfaces; preserve platform-specific components']),
+        package: packageSource('styling', `import { light, dark, spacing } from './tokens.cjs';
+
+export const styling = {
+  colors: {
+    foreground: 'hsl(' + light['--foreground'] + ')',
+    background: 'hsl(' + light['--background'] + ')',
+  },
+  spacing,
+  themes: { light, dark },
+};
+`, {}),
+        install: scaffoldStyling,
     },
 });
 export const STANDARD_PRODUCTS = Object.freeze(Object.keys(PRODUCT_ITEMS));
@@ -366,7 +393,7 @@ function freeze(value) {
 }
 const DEFINITIONS = freeze({ ...FOUNDATION_ITEMS, ...PRODUCT_ITEMS });
 function describe(definition) {
-    const { install: _install, configure: _configure, resolveTargets: _targets, resolveDependencies: _dependencies, resolvePackage: _package, fallbackDependency: _fallback, ...metadata } = definition;
+    const { install: _install, configure: _configure, resolveTargets: _targets, resolveEnvironment: _environment, resolveDependencies: _dependencies, resolvePackage: _package, fallbackDependency: _fallback, ...metadata } = definition;
     return structuredClone(metadata);
 }
 export function getStackDefinition(name) {

package/dist/standard.js

@@ -8,7 +8,7 @@ import { registerVercelApplication } from './vercel.js';
 import { registerApplication } from './delivery.js';
 import { runStagedTransaction } from './transaction.js';
 import { createSetupPlan } from './capabilities.js';
-import { bootstrapWorkspace, assertBootstrapPlatform } from './scaffold/bootstrap.js';
+import { bootstrapWorkspace, assertBootstrapPlatform, assertWorkspaceRuntime, } from './scaffold/bootstrap.js';
 import { composeStack } from './scaffold/compose.js';
 import { parseStandardOptions } from './registry/options.js';
 import { STANDARD_USAGE } from './registry/usage.js';
@@ -21,6 +21,7 @@ export async function scaffoldStandardProject(options, run = execFile) {
         return;
     }
     assertBootstrapPlatform(run);
+    assertWorkspaceRuntime(run);
     const root = options.root;
     const previousQuiet = process.env.ANHEDRAL_QUIET;
     if (options.json)

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const GENERATOR_VERSION = "0.10.0";
+export declare const GENERATOR_VERSION = "0.10.1";

package/dist/version.js

@@ -1 +1 @@
-export const GENERATOR_VERSION = '0.10.0';
+export const GENERATOR_VERSION = '0.10.1';

package/dist/vinext.js

@@ -1,3 +1,4 @@
+import { VINEXT_DEPENDENCIES } from './dependencies.js';
 import { existsSync, readFileSync, rmSync } from 'node:fs';
 import path from 'node:path';
 import { writeFile } from './util.js';
@@ -8,28 +9,14 @@ export function configureVinext(root, workerName, bindings) {
     const pkg = JSON.parse(readFileSync(path.join(root, 'apps/web/package.json'), 'utf8'));
     delete pkg.dependencies?.['@opennextjs/cloudflare'];
     pkg.type = 'module';
-    pkg.dependencies = {
-        ...pkg.dependencies,
-        vinext: '1.1.0',
-        next: '16.4.0',
-        react: '19.2.8',
-        'react-dom': '19.2.8',
-        'react-server-dom-webpack': '19.2.8',
-    };
-    pkg.devDependencies = {
-        ...pkg.devDependencies,
-        vite: '8.3.4',
-        '@cloudflare/vite-plugin': '1.63.1',
-        '@vitejs/plugin-rsc': '0.5.36',
-        '@vitejs/plugin-react': '6.1.2',
-        wrangler: '4.149.0',
-    };
+    pkg.dependencies = { ...pkg.dependencies, ...VINEXT_DEPENDENCIES.dependencies };
+    pkg.devDependencies = { ...pkg.devDependencies, ...VINEXT_DEPENDENCIES.devDependencies };
     pkg.scripts = {
         ...pkg.scripts,
         dev: 'vite dev --host 127.0.0.1 --port 3000',
         build: 'vite build',
         start: 'vinext start',
-        preview: 'wrangler dev --config dist/server/wrangler.json --persist-to .wrangler/state',
+        preview: 'wrangler dev --config dist/server/wrangler.json --port 3000 --persist-to .wrangler/state',
         deploy: 'vite build && wrangler deploy --config dist/server/wrangler.json',
         'build:worker': 'vite build',
         typecheck: 'wrangler types --env-interface CloudflareEnv cloudflare-env.d.ts && tsc --noEmit',
@@ -77,7 +64,11 @@ export default config;
     const uiFile = path.join(root, 'packages/ui/package.json');
     if (existsSync(uiFile)) {
         const ui = JSON.parse(readFileSync(uiFile, 'utf8'));
-        ui.dependencies = { ...ui.dependencies, react: '19.2.8', 'react-dom': '19.2.8' };
+        ui.dependencies = {
+            ...ui.dependencies,
+            react: VINEXT_DEPENDENCIES.dependencies.react,
+            'react-dom': VINEXT_DEPENDENCIES.dependencies['react-dom'],
+        };
         writeFile(uiFile, JSON.stringify(ui, null, 2) + '\n');
     }
 }

package/dist/workspace-graph.js

@@ -1,4 +1,5 @@
-import { existsSync, lstatSync, readFileSync, readdirSync } from 'node:fs';
+import { readBoundedFile, MAX_PROJECT_JSON_BYTES } from './bounded-file.js';
+import { existsSync, lstatSync, readdirSync } from 'node:fs';
 import path from 'node:path';
 import { dependencyOrder } from './dependency-order.js';
 const dependencyFields = [
@@ -12,7 +13,7 @@ function readManifest(file, directory) {
         throw new Error(`Workspace manifest missing: ${directory}.`);
     if (lstatSync(file).isSymbolicLink())
         throw new Error(`Workspace symlinks are unsupported: ${directory}/package.json.`);
-    const value = JSON.parse(readFileSync(file, 'utf8'));
+    const value = JSON.parse(readBoundedFile(file, MAX_PROJECT_JSON_BYTES).toString('utf8'));
     if (!value || typeof value !== 'object' || Array.isArray(value))
         throw new Error(`Invalid workspace manifest: ${directory}.`);
     const manifest = value;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "anhedral",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Build and deliver applications with Cloudflare-first Vinext, selected services, optional Next.js on Vercel, and verified release evidence.",
   "type": "module",
   "exports": {