anhedral 0.6.1 → 0.7.0

package/README.md

@@ -4,7 +4,9 @@
 [![npm](https://img.shields.io/npm/v/anhedral)](https://www.npmjs.com/package/anhedral)
 [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)
 
-Initialize client-owned applications using the [Anhedral Application Stack & Delivery Standard](docs/application-stack-standard.md).
+Anhedral guides the development lifecycle through a ChatGPT/Codex plugin: planning, developer setup, infrastructure, implementation, verification, delivery, and operations. The CLI initializes the repository foundation using the [Anhedral Application Stack & Delivery Standard](docs/application-stack-standard.md).
+
+The plugin source lives in `plugins/anhedral`. It guides recommended plugins, CLI tooling, client-owned accounts, infrastructure and scoped permissions for the selected stack. It uses available integrations and documented alternatives; installation does not grant provider access. Install the repository plugin with `codex plugin marketplace add anhedral/anhedral-init`, then `codex plugin add anhedral@anhedral`. Releases include a self-contained plugin ZIP with the same version as the CLI. A public ChatGPT directory listing requires separate submission.
 
 Every new project starts from the official **shadcn pnpm/Turborepo monorepo**. The default creates **Next.js + React + TypeScript + Tailwind + shadcn/ui**, hosted on **Cloudflare Workers through OpenNext**. Select additional apps and services only when needed.
 
@@ -35,9 +37,11 @@ Generated projects include `dev`, `build`, `lint`, `typecheck`, `test`, `audit`,
 
 Provider packages and services are **starters**, not finished product features. Generated READMEs identify the remaining setup: resource IDs, migrations, product authorization, webhooks, native adapters and runtime SDK initialization. Initialization does not create cloud resources, activate billing, or deploy. Human approval is required for paid activation, material spending, architecture exceptions and production releases.
 
-The CLI supports `new`, `init`, `--help`, and `--version`. Use `anhedral --help` for options.
+The CLI supports `new`, `init`, `doctor`, `--help`, and `--version`. `anhedral doctor <directory> --json` checks local setup requirements without writes; provider access and production readiness remain unverified. Use `anhedral --help` for options. Its JSON plan includes versioned setup requirements, and generated projects include `anhedral.setup.json`. Requirements do not imply that accounts or resources are configured. The CLI and plugin registry share one source in `src/capabilities.ts`; `pnpm build` refreshes the plugin's bundled registry and stack standard.
+
+Requires Node.js 20.19+ in the 20 series or 22.12+ and pnpm 10.34.5. Version 0.6 replaces the legacy generator and builder with the Cloudflare-first initializer; earlier generator commands and templates are retired. Existing applications are not automatically migrated. Pin the CLI version and commit the generated lockfile. The `shadcn@latest` bootstrap can change between generation dates; review upgrades before use.
 
-Requires Node.js 20.19+ in the 20 series or 22.12+ and pnpm 10.34.5. Version 0.6 replaces the legacy generator and builder with the Cloudflare-first initializer; earlier generator commands and templates are retired. Existing applications are not automatically migrated. Pin a CLI version for reproducible initialization and review upgrades before use.
+Initialize from Linux, macOS, or WSL. Native Windows initialization fails before writes because upstream shadcn currently resolves monorepo component paths outside the project; planning and `doctor` remain portable. Expo's release gate currently blocks unpatched `node-forge` and `braces` advisories in its CLI/Metro dependencies. Application releases require resolving or explicitly reviewing those risks; the initializer does not waive them.
 
 ## Contributing and security
 
@@ -59,6 +63,7 @@ scripts/, tests/, docs/      Tooling, verification, and the stack standard
 Each demo retains its own pnpm workspace and lockfile; the root package remains the initializer. Dependencies, caches, generated artifacts, and local credentials are ignored.
 
 ```sh
+pnpm test:integration                 # Real web, API/auth, and packaged desktop paths
 pnpm --dir demo/anhedral-factory dev
 pnpm --dir demo/anhedral-factory check
 ```

package/assets/anhedral-cli-init-technical.svg

@@ -230,11 +230,11 @@
 <text x="1539" y="1221" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="12" font-weight="400" text-anchor="start" letter-spacing="0">Workers AI when advantageous</text>
 <rect x="1435" y="1234" width="430" height="80" rx="12" fill="url(#card-fill)" stroke="#73777b" stroke-width="1.15"/>
 <rect x="1451" y="1246" width="56" height="56" rx="11" fill="#07121d" stroke="#34424e" stroke-width="1.15"/>
-<g transform="translate(1455 1250) scale(2)"><path d="M14.679 0c4.648 0 7.413 2.765 7.413 6.434s-2.765 6.434-7.413 6.434H12.33L24 24h-8.245l-8.88-8.44c-.636-.588-.93-1.273-.93-1.86 0-.831.587-1.565 1.713-1.883l4.574-1.224c1.737-.465 2.936-1.81 2.936-3.572 0-2.153-1.761-3.4-3.939-3.4H0V0z" fill="#f7f5f0"/></g>
+<g transform="translate(1455 1250) scale(2)"><path d="M16.5088 16.8447c.1475-.5068.0908-.9707-.1553-1.3154-.2246-.3164-.6045-.499-1.0615-.5205l-8.6592-.1123a.1559.1559 0 0 1-.1333-.0713c-.0283-.042-.0351-.0986-.021-.1553.0278-.084.1123-.1484.2036-.1562l8.7359-.1123c1.0351-.0489 2.1601-.8868 2.5537-1.9136l.499-1.3013c.0215-.0561.0293-.1128.0147-.168-.5625-2.5463-2.835-4.4453-5.5499-4.4453-2.5039 0-4.6284 1.6177-5.3876 3.8614-.4927-.3658-1.1187-.5625-1.794-.499-1.2026.119-2.1665 1.083-2.2861 2.2856-.0283.31-.0069.6128.0635.894C1.5683 13.171 0 14.7754 0 16.752c0 .1748.0142.3515.0352.5273.0141.083.0844.1475.1689.1475h15.9814c.0909 0 .1758-.0645.2032-.1553l.12-.4268zm2.7568-5.5634c-.0771 0-.1611 0-.2383.0112-.0566 0-.1054.0415-.127.0976l-.3378 1.1744c-.1475.5068-.0918.9707.1543 1.3164.2256.3164.6055.498 1.0625.5195l1.8437.1133c.0557 0 .1055.0263.1329.0703.0283.043.0351.1074.0214.1562-.0283.084-.1132.1485-.204.1553l-1.921.1123c-1.041.0488-2.1582.8867-2.5527 1.914l-.1406.3585c-.0283.0713.0215.1416.0986.1416h6.5977c.0771 0 .1474-.0489.169-.126.1122-.4082.1757-.837.1757-1.2803 0-2.6025-2.125-4.727-4.7344-4.727" fill="#f48120"/></g>
 <path d="M 1519 1248 L 1519 1300" fill="none" stroke="#34424e" stroke-width="1" stroke-linecap="round"/>
-<text x="1539" y="1265" fill="#f7f5f0" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="18" font-weight="500" text-anchor="start" letter-spacing="0">Resend + Email Routing</text>
-<text x="1539" y="1289" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="14" font-weight="400" text-anchor="start" letter-spacing="0">Outbound app email + inbound forwarding</text>
-<text x="1539" y="1309" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="12" font-weight="400" text-anchor="start" letter-spacing="0">Business mailbox stays with existing provider</text>
+<text x="1539" y="1265" fill="#f7f5f0" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="18" font-weight="500" text-anchor="start" letter-spacing="0">Domain + Mail</text>
+<text x="1539" y="1289" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="14" font-weight="400" text-anchor="start" letter-spacing="0">GoDaddy broker · Cloudflare nameservers</text>
+<text x="1539" y="1309" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="12" font-weight="400" text-anchor="start" letter-spacing="0">Cloudflare Routing + Sending / Resend alternative</text>
 <rect x="1435" y="1322" width="430" height="80" rx="12" fill="url(#card-fill)" stroke="#73777b" stroke-width="1.15"/>
 <rect x="1451" y="1334" width="56" height="56" rx="11" fill="#07121d" stroke="#34424e" stroke-width="1.15"/>
 <g transform="translate(1455 1338) scale(2)"><path d="M16.5088 16.8447c.1475-.5068.0908-.9707-.1553-1.3154-.2246-.3164-.6045-.499-1.0615-.5205l-8.6592-.1123a.1559.1559 0 0 1-.1333-.0713c-.0283-.042-.0351-.0986-.021-.1553.0278-.084.1123-.1484.2036-.1562l8.7359-.1123c1.0351-.0489 2.1601-.8868 2.5537-1.9136l.499-1.3013c.0215-.0561.0293-.1128.0147-.168-.5625-2.5463-2.835-4.4453-5.5499-4.4453-2.5039 0-4.6284 1.6177-5.3876 3.8614-.4927-.3658-1.1187-.5625-1.794-.499-1.2026.119-2.1665 1.083-2.2861 2.2856-.0283.31-.0069.6128.0635.894C1.5683 13.171 0 14.7754 0 16.752c0 .1748.0142.3515.0352.5273.0141.083.0844.1475.1689.1475h15.9814c.0909 0 .1758-.0645.2032-.1553l.12-.4268zm2.7568-5.5634c-.0771 0-.1611 0-.2383.0112-.0566 0-.1054.0415-.127.0976l-.3378 1.1744c-.1475.5068-.0918.9707.1543 1.3164.2256.3164.6055.498 1.0625.5195l1.8437.1133c.0557 0 .1055.0263.1329.0703.0283.043.0351.1074.0214.1562-.0283.084-.1132.1485-.204.1553l-1.921.1123c-1.041.0488-2.1582.8867-2.5527 1.914l-.1406.3585c-.0283.0713.0215.1416.0986.1416h6.5977c.0771 0 .1474-.0489.169-.126.1122-.4082.1757-.837.1757-1.2803 0-2.6025-2.125-4.727-4.7344-4.727" fill="#f48120"/></g>

package/assets/anhedral-cli-init.svg

@@ -230,11 +230,11 @@
 <text x="1539" y="1221" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="12" font-weight="400" text-anchor="start" letter-spacing="0">Workers AI when advantageous</text>
 <rect x="1435" y="1234" width="430" height="80" rx="12" fill="url(#card-fill)" stroke="#73777b" stroke-width="1.15"/>
 <rect x="1451" y="1246" width="56" height="56" rx="11" fill="#07121d" stroke="#34424e" stroke-width="1.15"/>
-<g transform="translate(1455 1250) scale(2)"><path d="M14.679 0c4.648 0 7.413 2.765 7.413 6.434s-2.765 6.434-7.413 6.434H12.33L24 24h-8.245l-8.88-8.44c-.636-.588-.93-1.273-.93-1.86 0-.831.587-1.565 1.713-1.883l4.574-1.224c1.737-.465 2.936-1.81 2.936-3.572 0-2.153-1.761-3.4-3.939-3.4H0V0z" fill="#f7f5f0"/></g>
+<g transform="translate(1455 1250) scale(2)"><path d="M16.5088 16.8447c.1475-.5068.0908-.9707-.1553-1.3154-.2246-.3164-.6045-.499-1.0615-.5205l-8.6592-.1123a.1559.1559 0 0 1-.1333-.0713c-.0283-.042-.0351-.0986-.021-.1553.0278-.084.1123-.1484.2036-.1562l8.7359-.1123c1.0351-.0489 2.1601-.8868 2.5537-1.9136l.499-1.3013c.0215-.0561.0293-.1128.0147-.168-.5625-2.5463-2.835-4.4453-5.5499-4.4453-2.5039 0-4.6284 1.6177-5.3876 3.8614-.4927-.3658-1.1187-.5625-1.794-.499-1.2026.119-2.1665 1.083-2.2861 2.2856-.0283.31-.0069.6128.0635.894C1.5683 13.171 0 14.7754 0 16.752c0 .1748.0142.3515.0352.5273.0141.083.0844.1475.1689.1475h15.9814c.0909 0 .1758-.0645.2032-.1553l.12-.4268zm2.7568-5.5634c-.0771 0-.1611 0-.2383.0112-.0566 0-.1054.0415-.127.0976l-.3378 1.1744c-.1475.5068-.0918.9707.1543 1.3164.2256.3164.6055.498 1.0625.5195l1.8437.1133c.0557 0 .1055.0263.1329.0703.0283.043.0351.1074.0214.1562-.0283.084-.1132.1485-.204.1553l-1.921.1123c-1.041.0488-2.1582.8867-2.5527 1.914l-.1406.3585c-.0283.0713.0215.1416.0986.1416h6.5977c.0771 0 .1474-.0489.169-.126.1122-.4082.1757-.837.1757-1.2803 0-2.6025-2.125-4.727-4.7344-4.727" fill="#f48120"/></g>
 <path d="M 1519 1248 L 1519 1300" fill="none" stroke="#34424e" stroke-width="1" stroke-linecap="round"/>
-<text x="1539" y="1265" fill="#f7f5f0" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="18" font-weight="500" text-anchor="start" letter-spacing="0">Resend + Email Routing</text>
-<text x="1539" y="1289" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="14" font-weight="400" text-anchor="start" letter-spacing="0">Outbound app email + inbound forwarding</text>
-<text x="1539" y="1309" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="12" font-weight="400" text-anchor="start" letter-spacing="0">Business mailbox stays with existing provider</text>
+<text x="1539" y="1265" fill="#f7f5f0" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="18" font-weight="500" text-anchor="start" letter-spacing="0">Domain + Mail</text>
+<text x="1539" y="1289" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="14" font-weight="400" text-anchor="start" letter-spacing="0">GoDaddy broker · Cloudflare nameservers</text>
+<text x="1539" y="1309" fill="#c4c7ca" font-family="Inter, Helvetica Neue, Arial, sans-serif" font-size="12" font-weight="400" text-anchor="start" letter-spacing="0">Cloudflare Routing + Sending / Resend alternative</text>
 <rect x="1435" y="1322" width="430" height="80" rx="12" fill="url(#card-fill)" stroke="#73777b" stroke-width="1.15"/>
 <rect x="1451" y="1334" width="56" height="56" rx="11" fill="#07121d" stroke="#34424e" stroke-width="1.15"/>
 <g transform="translate(1455 1338) scale(2)"><path d="M16.5088 16.8447c.1475-.5068.0908-.9707-.1553-1.3154-.2246-.3164-.6045-.499-1.0615-.5205l-8.6592-.1123a.1559.1559 0 0 1-.1333-.0713c-.0283-.042-.0351-.0986-.021-.1553.0278-.084.1123-.1484.2036-.1562l8.7359-.1123c1.0351-.0489 2.1601-.8868 2.5537-1.9136l.499-1.3013c.0215-.0561.0293-.1128.0147-.168-.5625-2.5463-2.835-4.4453-5.5499-4.4453-2.5039 0-4.6284 1.6177-5.3876 3.8614-.4927-.3658-1.1187-.5625-1.794-.499-1.2026.119-2.1665 1.083-2.2861 2.2856-.0283.31-.0069.6128.0635.894C1.5683 13.171 0 14.7754 0 16.752c0 .1748.0142.3515.0352.5273.0141.083.0844.1475.1689.1475h15.9814c.0909 0 .1758-.0645.2032-.1553l.12-.4268zm2.7568-5.5634c-.0771 0-.1611 0-.2383.0112-.0566 0-.1054.0415-.127.0976l-.3378 1.1744c-.1475.5068-.0918.9707.1543 1.3164.2256.3164.6055.498 1.0625.5195l1.8437.1133c.0557 0 .1055.0263.1329.0703.0283.043.0351.1074.0214.1562-.0283.084-.1132.1485-.204.1553l-1.921.1123c-1.041.0488-2.1582.8867-2.5527 1.914l-.1406.3585c-.0283.0713.0215.1416.0986.1416h6.5977c.0771 0 .1474-.0489.169-.126.1122-.4082.1757-.837.1757-1.2803 0-2.6025-2.125-4.727-4.7344-4.727" fill="#f48120"/></g>

package/dist/bin.js

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+import path from 'node:path';
+import { inspectProject } from './readiness.js';
 import { argv } from 'node:process';
 import { STANDARD_USAGE, parseStandardOptions, scaffoldStandardProject } from './standard.js';
 import { GENERATOR_VERSION } from './version.js';
@@ -6,24 +8,41 @@ import { PostCommitError } from './transaction.js';
 const [command, ...args] = argv.slice(2);
 const json = args.includes('--json');
 async function main() {
-    if (!command || command === '--help' || command === '-h') {
+    if ([undefined, '--help', '-h'].includes(command)) {
         console.log(json ? JSON.stringify({ usage: STANDARD_USAGE }) : STANDARD_USAGE);
         return;
     }
-    if (command === '--version' || command === '-v') {
+    if (['--version', '-v'].includes(command)) {
         console.log(json ? JSON.stringify({ version: GENERATOR_VERSION }) : GENERATOR_VERSION);
         return;
     }
+    if (command === 'doctor') {
+        runDoctor(args);
+        return;
+    }
     if (command !== 'new' && command !== 'init') {
-        throw new Error(`Unknown command: ${command}. Use new, init, --help, or --version.`);
+        throw new Error(`Unknown command: ${command}. Use new, init, doctor, --help, or --version.`);
     }
-    if (args.includes('--help') || args.includes('-h')) {
+    if (args.some((arg) => ['--help', '-h'].includes(arg))) {
         console.log(json ? JSON.stringify({ usage: STANDARD_USAGE }) : STANDARD_USAGE);
         return;
     }
-    let options;
+    const options = readOptions(command, args);
+    if (options)
+        await scaffoldStandardProject(options);
+}
+function runDoctor(args) {
+    const positional = args.filter((arg) => arg !== '--json');
+    if (positional.length > 1 || positional.some((arg) => arg.startsWith('-')))
+        throw new Error('Usage: anhedral doctor [directory] [--json]');
+    const report = inspectProject(path.resolve(positional[0] ?? process.cwd()));
+    console.log(JSON.stringify(report, null, json ? 2 : undefined));
+    if (!report.localReady)
+        process.exitCode = 1;
+}
+function readOptions(command, args) {
     try {
-        options = parseStandardOptions(command, args);
+        return parseStandardOptions(command, args);
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
@@ -31,7 +50,6 @@ async function main() {
         process.exitCode = 1;
         return;
     }
-    await scaffoldStandardProject(options);
 }
 try {
     await main();
@@ -39,7 +57,8 @@ try {
 catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     const code = error instanceof PostCommitError ? 'POST_COMMIT_FAILED'
-        : command === 'new' || command === 'init' ? 'GENERATION_FAILED' : 'UNKNOWN_COMMAND';
+        : command === 'doctor' ? 'INVALID_ARGUMENT'
+            : command === 'new' || command === 'init' ? 'GENERATION_FAILED' : 'UNKNOWN_COMMAND';
     console.error(json ? JSON.stringify({ error: message, code }) : `Error: ${message}`);
     process.exitCode = 1;
 }

package/dist/capabilities.d.ts

@@ -0,0 +1,54 @@
+import type { StandardProduct } from './standard-products.js';
+import type { StandardOptions } from './standard.js';
+export interface Selection {
+    app?: boolean;
+    conflicts?: StandardProduct[];
+    requiresAny?: StandardProduct[];
+    requiresAll?: StandardProduct[];
+    workerBinding?: boolean;
+}
+export interface Capability {
+    purpose: string;
+    tools: string[];
+    access: string[];
+    credentials: string[];
+    resources: string[];
+    verify: string[];
+    selection: Selection;
+}
+/** Setup requirements describe unfinished starters; they never grant authority or claim readiness. */
+export declare const CAPABILITIES: Record<StandardProduct, Capability>;
+export declare function resolveStandardProducts(selected: Set<StandardProduct>, hosting: StandardOptions['hosting'], hostingSpecified: boolean): void;
+export declare const CAPABILITY_REGISTRY: {
+    schemaVersion: number;
+    cliVersion: string;
+    capabilities: Record<"next" | "expo" | "electron" | "wxt" | "hono" | "neon" | "d1" | "local-data" | "clerk" | "better-auth" | "r2" | "kv" | "realtime" | "queues" | "cron" | "workflows" | "openai" | "ai-sdk" | "workers-ai" | "resend" | "stripe" | "revenuecat" | "sentry" | "basin" | "posthog" | "styling", Capability>;
+};
+export declare function createSetupPlan(options: StandardOptions): {
+    schemaVersion: number;
+    cliVersion: string;
+    registryVersion: number;
+    standard: string;
+    root: string;
+    products: ("next" | "expo" | "electron" | "wxt" | "hono" | "neon" | "d1" | "local-data" | "clerk" | "better-auth" | "r2" | "kv" | "realtime" | "queues" | "cron" | "workflows" | "openai" | "ai-sdk" | "workers-ai" | "resend" | "stripe" | "revenuecat" | "sentry" | "basin" | "posthog" | "styling")[];
+    hosting: "cloudflare" | "vercel";
+    bootstrap: string[];
+    dryRun: boolean;
+    setup: {
+        tools: string[];
+        access: string[];
+        capabilities: {
+            status: "starter" | "planned";
+            purpose: string;
+            tools: string[];
+            access: string[];
+            credentials: string[];
+            resources: string[];
+            verify: string[];
+            selection: Selection;
+            id: "next" | "expo" | "electron" | "wxt" | "hono" | "neon" | "d1" | "local-data" | "clerk" | "better-auth" | "r2" | "kv" | "realtime" | "queues" | "cron" | "workflows" | "openai" | "ai-sdk" | "workers-ai" | "resend" | "stripe" | "revenuecat" | "sentry" | "basin" | "posthog" | "styling";
+        }[];
+        completion: string[];
+        resourcesProvisioned: boolean;
+    };
+};

package/dist/capabilities.js

@@ -0,0 +1,90 @@
+import { GENERATOR_VERSION } from './version.js';
+import { PACKAGE_MANAGER } from './dependencies.js';
+function capability(purpose, tools, access, credentials, resources, verify, selection = {}) {
+    return { purpose, tools, access, credentials, resources, verify, selection };
+}
+/** Setup requirements describe unfinished starters; they never grant authority or claim readiness. */
+export const CAPABILITIES = {
+    next: capability('Web application', ['Browser control'], [], [], ['Next.js app; configure the selected hosting provider'], ['Web flows, accessibility, production hosting build and deployed preview'], { app: true }),
+    expo: capability('Mobile application', ['Expo/EAS CLI', 'Xcode or Android SDK'], ['Client-owned Apple/Google developer accounts for store delivery'], ['Platform signing credentials; EAS access when used'], ['Expo app; native adapters, signing, store configuration'], ['Native simulator/device flows and signed native build; web export alone is insufficient'], { app: true }),
+    electron: capability('Desktop application', ['Electron tooling', 'Platform packaging tools'], ['Signing/notarization account for the target platform'], ['Signing credentials; notarization credentials when required'], ['Electron app; packaging and distribution configuration'], ['Packaged desktop app, permissions, update/recovery behavior'], { app: true }),
+    wxt: capability('Chrome side-panel extension', ['Chrome', 'WXT'], ['Extension store publisher access for distribution'], ['Store publishing credentials when required'], ['Extension app; minimal browser permissions and store package'], ['Installed side panel, background/content messaging and permission behavior'], { app: true }),
+    hono: capability('Shared OpenAPI backend', ['Wrangler'], ['Cloudflare Workers deployment access'], [], ['API Worker; application routes and authorization'], ['Contract validation, unauthenticated rejection and resource ownership'], { app: true }),
+    neon: capability('PostgreSQL persistence through Drizzle and Hyperdrive', ['Neon integration or API', 'Wrangler'], ['Neon project/branch access; Cloudflare Hyperdrive configuration access'], ['DATABASE_URL for migrations; separate least-privilege Hyperdrive origin credentials'], ['Neon project/branches, database roles, migrations, HYPERDRIVE binding'], ['Migration and runtime connectivity; disable query caching for correctness-sensitive reads'], { conflicts: ['d1'], workerBinding: true }),
+    d1: capability('SQLite-compatible hosted persistence', ['Wrangler'], ['Cloudflare D1 access'], [], ['D1 database, DB binding and reviewed migrations'], ['Migration, constraints, transactional behavior and runtime queries'], { conflicts: ['neon'], workerBinding: true }),
+    'local-data': capability('Device-local SQLite and files', ['Selected platform database/filesystem tooling'], [], [], ['Integration boundary; implement platform adapters and explicit synchronization if needed'], ['Persistence, offline writes and recovery on the selected device']),
+    clerk: capability('Managed identity', ['Clerk integration or dashboard'], ['Client-owned Clerk project access'], ['Clerk publishable key; server secret key; webhook secret when used'], ['Identity project, allowed URLs, SDK setup and protected routes'], ['Sign-in/out, session expiry, resource authorization and selected native client flows'], { conflicts: ['better-auth'], requiresAny: ['next', 'hono'] }),
+    'better-auth': capability('Application-managed identity', ['Selected database tooling'], ['Selected database migration/runtime access'], ['BETTER_AUTH_SECRET; BETTER_AUTH_URL'], ['Selected Neon or D1 database, auth schema, trusted origins and application routes'], ['Sign-in/out, session expiry, sign-up policy and resource authorization'], { conflicts: ['clerk'], requiresAny: ['neon', 'd1'], workerBinding: true }),
+    r2: capability('Private remote files', ['Wrangler'], ['Cloudflare R2 bucket/binding access'], [], ['Private R2 bucket and FILES binding; authorized upload/download endpoints'], ['Public bucket access disabled; file ownership enforced; clients receive no storage credentials'], { workerBinding: true }),
+    kv: capability('Eventually consistent cache/configuration', ['Wrangler'], ['Cloudflare KV namespace access'], [], ['KV namespace and CONFIG binding'], ['TTL and propagation behavior; never use KV as transactional authority'], { workerBinding: true }),
+    realtime: capability('Rooms and collaboration', ['Wrangler', 'Browser control'], ['Cloudflare Durable Objects deployment access'], [], ['Realtime Worker, Durable Object namespace/migration and WebSocket authorization'], ['Authorized room isolation, disconnect/reconnect and deployed WebSockets']),
+    queues: capability('Deferred jobs', ['Wrangler'], ['Cloudflare Queues configuration access'], [], ['Queue, producer/consumer bindings and failure handling'], ['Retries, idempotency, concurrency and dead-letter recovery']),
+    cron: capability('Scheduled work', ['Wrangler'], ['Cloudflare Worker deployment access'], [], ['Scheduled Worker and environment-specific Cron Triggers'], ['Schedule, idempotency, failure visibility and overlapping runs']),
+    workflows: capability('Durable multi-step processing', ['Wrangler'], ['Cloudflare Workflows deployment access'], [], ['Workflow Worker/binding and resumable steps'], ['Retry/resume, idempotency, cancellation and failure recovery']),
+    openai: capability('Direct OpenAI integration', ['OpenAI integration or API'], ['Client-owned OpenAI project and model access'], ['OPENAI_API_KEY'], ['Server SDK factory; implement application behavior and spending limits'], ['Selected model, failure handling, private inputs and cost controls'], { conflicts: ['ai-sdk'] }),
+    'ai-sdk': capability('Streaming AI and provider abstraction', ['Selected AI provider integration or API'], ['Selected provider project/model access'], ['OPENAI_API_KEY for the generated default; selected provider credentials otherwise'], ['Server SDK factory; implement streaming, tools and application behavior'], ['Streaming, tool authorization, interruption and spending limits'], { conflicts: ['openai'] }),
+    'workers-ai': capability('Cloudflare-hosted inference', ['Wrangler'], ['Cloudflare Workers AI model access'], [], ['AI binding and selected model invocation'], ['Supported model behavior, authorization and usage limits'], { workerBinding: true }),
+    resend: capability('Outbound application email', ['Resend integration or API'], ['Client-owned Resend project; sending-domain DNS access'], ['RESEND_API_KEY; webhook secret when used'], ['Verified sending domain, sender and server integration'], ['Delivery, suppression/bounce handling and webhook verification; inbound routing is separate']),
+    stripe: capability('Web payments and subscriptions', ['Stripe integration or CLI'], ['Client-owned Stripe account; test/live access as required'], ['STRIPE_SECRET_KEY; STRIPE_WEBHOOK_SECRET'], ['Products/prices, signed webhooks and entitlement implementation'], ['Test purchase/cancellation, webhook replay and transactional idempotency']),
+    revenuecat: capability('Cross-store subscription entitlements alongside Stripe', ['RevenueCat integration or API', 'Selected mobile store tooling'], ['RevenueCat project; App Store/Play Store product access'], ['Platform public SDK keys; server API/webhook credentials as required'], ['Integration guidance only; install platform SDKs and configure offerings/store products'], ['Sandbox purchase/restore, verified webhooks and entitlement reconciliation'], { requiresAll: ['stripe'] }),
+    sentry: capability('Additional runtime/crash diagnostics', ['Sentry integration or API'], ['Client-owned Sentry project access'], ['SENTRY_DSN; source-map upload token when required'], ['Integration boundary; install/init runtime SDKs and configure private source-map uploads'], ['Captured runtime errors, source maps, privacy filtering and alert delivery']),
+    basin: capability('Cloudflare analytical events', ['Wrangler', 'Cloudflare integration or API'], ['Cloudflare analytics/Pipelines access; plan supporting selected services; Pipelines Setup grant for managed R2 sink setup'], [], ['Basin dataset/stream, ANALYTICS binding, optional private R2 sink and authorized sink writes'], ['Private ingestion, event delivery, query results and archive retrieval when selected'], { workerBinding: true }),
+    posthog: capability('Specialized product analytics', ['PostHog integration or API'], ['Client-owned PostHog project access'], ['POSTHOG_API_KEY; POSTHOG_HOST; separate privileged key if needed'], ['Analytics client factory; implement consent, event schema and privacy filtering'], ['Event receipt, consent behavior and redaction of private data']),
+    styling: capability('Shared styling definitions', [], [], [], ['Styling package; implement actual shared colors, typography, spacing and themes'], ['Consistency across selected interfaces; preserve platform-specific components']),
+};
+export function resolveStandardProducts(selected, hosting, hostingSpecified) {
+    if (![...selected].some((id) => CAPABILITIES[id].selection.app))
+        selected.add('next');
+    for (const id of selected)
+        validateSelection(id, selected);
+    const needsWorker = [...selected].some((id) => CAPABILITIES[id].selection.workerBinding);
+    if (needsWorker && !selected.has('hono') && (!selected.has('next') || hosting !== 'cloudflare')) {
+        throw new Error('Selected server bindings need a Cloudflare Next.js app or an explicitly selected Hono Worker.');
+    }
+    if (hostingSpecified && !selected.has('next'))
+        throw new Error('--hosting applies to the Next.js app.');
+}
+function validateSelection(id, selected) {
+    const { conflicts = [], requiresAny = [], requiresAll = [] } = CAPABILITIES[id].selection;
+    const conflict = conflicts.find((other) => selected.has(other));
+    if (conflict)
+        throw new Error(`Choose one of ${[id, conflict].join(' / ')}.`);
+    if (requiresAny.length && !requiresAny.some((other) => selected.has(other))) {
+        throw new Error(`${id} requires an explicitly selected ${requiresAny.join(' or ')} capability.`);
+    }
+    const missing = requiresAll.filter((other) => !selected.has(other));
+    if (missing.length)
+        throw new Error(`${id} requires ${missing.join(', ')}; select it explicitly.`);
+}
+export const CAPABILITY_REGISTRY = { schemaVersion: 1, cliVersion: GENERATOR_VERSION, capabilities: CAPABILITIES };
+const HOSTING_SETUP = {
+    cloudflare: {
+        tools: ['Cloudflare integration or API', 'Wrangler'],
+        access: ['Client-owned Cloudflare account; account ID; scoped OAuth/API access; service-compatible plan; DNS access only when needed'],
+    },
+    vercel: {
+        tools: ['Vercel integration or CLI'],
+        access: ['Client-owned Vercel project access; approved architecture exception'],
+    },
+};
+export function createSetupPlan(options) {
+    const capabilities = options.products.map((id) => ({ id, ...CAPABILITIES[id], status: options.dryRun ? 'planned' : 'starter' }));
+    const providers = [...new Set([
+            ...(options.products.includes('next') ? [options.hosting] : []),
+            ...capabilities.flatMap(({ tools }) => tools.includes('Wrangler') ? ['cloudflare'] : []),
+        ])].map((provider) => HOSTING_SETUP[provider]);
+    return {
+        schemaVersion: 1, cliVersion: GENERATOR_VERSION, registryVersion: CAPABILITY_REGISTRY.schemaVersion,
+        standard: 'anhedral-application-stack', root: options.root, products: options.products, hosting: options.hosting,
+        bootstrap: ['pnpm', 'dlx', 'shadcn@latest', 'init', '--monorepo', '--template', 'next'], dryRun: options.dryRun,
+        setup: {
+            tools: [...new Set(['Git', 'Node.js 22.13+ for generated workspaces', PACKAGE_MANAGER.replace('@', ' '), 'GitHub integration or gh', 'Fallow', 'Cloudflare security audit skill',
+                    ...providers.flatMap((provider) => provider.tools), ...capabilities.flatMap((item) => item.tools)])],
+            access: ['Client-owned repository and CI access', ...providers.flatMap((provider) => provider.access)],
+            capabilities,
+            completion: ['Discover available plugins and fallbacks; verify the selected account and scope', 'Configure separate environments, bindings and server-side secrets',
+                'Implement starter behavior and meaningful tests', 'Run pnpm check plus platform/provider verification', 'Verify deployed preview; obtain required production authorization; record rollback and operating ownership'],
+            resourcesProvisioned: false,
+        },
+    };
+}

package/dist/command.d.ts

@@ -0,0 +1,5 @@
+/** Windows batch shims cannot be spawned without a shell; invoke their Node entry instead. */
+export declare function resolveCommand(command: string, args: readonly string[], platform?: NodeJS.Platform, searchPath?: string): {
+    command: string;
+    args: string[];
+};

package/dist/command.js

@@ -0,0 +1,16 @@
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+/** Windows batch shims cannot be spawned without a shell; invoke their Node entry instead. */
+export function resolveCommand(command, args, platform = process.platform, searchPath = process.env.PATH ?? '') {
+    if (platform !== 'win32' || !['pnpm', 'pnpm.cmd'].includes(command))
+        return { command, args: [...args] };
+    const directories = searchPath.split(';').filter(Boolean);
+    const executable = directories.map((directory) => path.join(directory, 'pnpm.exe')).find(existsSync);
+    if (executable)
+        return { command: executable, args: [...args] };
+    const entries = ['node_modules/pnpm/bin/pnpm.cjs', 'node_modules/corepack/dist/pnpm.js', 'pnpm.cjs', '../pnpm/bin/pnpm.cjs'];
+    const entry = directories.flatMap((directory) => entries.map((file) => path.join(directory, file))).find(existsSync);
+    if (!entry)
+        throw new Error('Cannot locate a direct pnpm entry point. Install pnpm or enable Corepack.');
+    return { command: process.execPath, args: [entry, ...args] };
+}

package/dist/dependencies.js

@@ -24,8 +24,7 @@ export const DESKTOP_DEPENDENCIES = {
         "electron": '43.7.8',
         // renovate: datasource=npm depName=electron-builder
         "electron-builder": '26.15.3',
-        // renovate: datasource=npm depName=electron-builder-squirrel-windows
-        "electron-builder-squirrel-windows": '26.15.3',
+        "eslint": '10.0.3',
         // renovate: datasource=npm depName=tailwindcss
         "tailwindcss": '4.1.18',
         // renovate: datasource=npm depName=postcss
@@ -74,10 +73,6 @@ export const MOBILE_APP_DEPENDENCIES = {
     "dependencies": {
         // renovate: datasource=npm depName=@rn-primitives/portal
         "@rn-primitives/portal": '1.5.2',
-        // renovate: datasource=npm depName=@rn-primitives/slot
-        "@rn-primitives/slot": '1.5.2',
-        // renovate: datasource=npm depName=class-variance-authority
-        "class-variance-authority": '0.7.1',
         // renovate: datasource=npm depName=clsx
         "clsx": '2.1.1',
         // renovate: datasource=npm depName=expo
@@ -88,18 +83,12 @@ export const MOBILE_APP_DEPENDENCIES = {
         "expo-router": '57.0.8',
         // renovate: datasource=npm depName=expo-status-bar
         "expo-status-bar": '57.0.1',
-        // renovate: datasource=npm depName=expo-system-ui
-        "expo-system-ui": '57.0.1',
-        // renovate: datasource=npm depName=lucide-react-native
-        "lucide-react-native": '1.21.0',
         // renovate: datasource=npm depName=react
         "react": '19.2.3',
         // renovate: datasource=npm depName=react-dom
         "react-dom": '19.2.3',
         // renovate: datasource=npm depName=react-native
         "react-native": '0.86.0',
-        // renovate: datasource=npm depName=react-native-gesture-handler
-        "react-native-gesture-handler": '2.32.0',
         // renovate: datasource=npm depName=react-native-reanimated
         "react-native-reanimated": '4.5.0',
         // renovate: datasource=npm depName=react-native-safe-area-context
@@ -110,14 +99,16 @@ export const MOBILE_APP_DEPENDENCIES = {
         "react-native-worklets": '0.10.0',
         // renovate: datasource=npm depName=react-native-web
         "react-native-web": '0.21.2',
-        // renovate: datasource=npm depName=react-native-svg
-        "react-native-svg": '15.15.4',
         // renovate: datasource=npm depName=tailwind-merge
         "tailwind-merge": '3.5.0',
         // renovate: datasource=npm depName=tailwindcss-animate
         "tailwindcss-animate": '1.0.7'
     },
     "devDependencies": {
+        // renovate: datasource=npm depName=@babel/core
+        "@babel/core": '7.29.7',
+        // renovate: datasource=npm depName=babel-preset-expo
+        "babel-preset-expo": '57.0.14',
         // renovate: datasource=npm depName=@testing-library/dom
         "@testing-library/dom": '10.4.1',
         // renovate: datasource=npm depName=@react-native/metro-config

package/dist/index.d.ts

@@ -1,3 +1,6 @@
 export { STANDARD_PRODUCTS, STANDARD_USAGE, parseStandardOptions, applyStandardOverlays, scaffoldStandardProject, } from './standard.js';
 export type { StandardOptions, StandardProduct, StandardRunner } from './standard.js';
 export { GENERATOR_VERSION } from './version.js';
+export { CAPABILITIES, CAPABILITY_REGISTRY, createSetupPlan } from './capabilities.js';
+export type { Capability } from './capabilities.js';
+export { inspectProject, validateSetupPlan } from './readiness.js';

package/dist/index.js

@@ -1,2 +1,4 @@
 export { STANDARD_PRODUCTS, STANDARD_USAGE, parseStandardOptions, applyStandardOverlays, scaffoldStandardProject, } from './standard.js';
 export { GENERATOR_VERSION } from './version.js';
+export { CAPABILITIES, CAPABILITY_REGISTRY, createSetupPlan } from './capabilities.js';
+export { inspectProject, validateSetupPlan } from './readiness.js';

package/dist/platforms/desktop.js

@@ -1,4 +1,5 @@
 import path from 'node:path';
+import { writeReactLintConfig } from './lint.js';
 import { writeFile } from '../util.js';
 import { DESKTOP_DEPENDENCIES } from '../dependencies.js';
 import { childPackageName, htmlText, identifierSegment, jsString } from '../render.js';
@@ -6,6 +7,7 @@ export async function scaffoldDesktop(root, options) {
     const { projectName, displayName } = options;
     const dir = path.join(root, 'apps/desktop');
     writePackageJson(dir, projectName);
+    writeReactLintConfig(dir);
     writeTsConfig(dir);
     writeViteConfig(dir);
     writePostcssConfig(dir);
@@ -15,7 +17,6 @@ export async function scaffoldDesktop(root, options) {
     writeSourceFiles(dir, displayName);
 }
 function writePackageJson(dir, projectName) {
-    const updatePublish = {};
     writeFile(path.join(dir, 'package.json'), JSON.stringify({
         name: childPackageName(projectName, 'desktop'),
         version: '0.1.0',
@@ -25,12 +26,12 @@ function writePackageJson(dir, projectName) {
         scripts: {
             dev: 'tsc -p tsconfig.main.json && node scripts/dev.mjs',
             build: 'tsc --noEmit && tsc -p tsconfig.main.json && vite build',
-            typecheck: 'tsc --noEmit',
-            'build:mac': `pnpm build && electron-builder --mac${''}`,
-            'build:win': `pnpm build && electron-builder --win${''}`,
-            'build:linux': `pnpm build && electron-builder --linux${''}`,
-            package: `pnpm build && electron-builder${''}`,
-            ...({}),
+            typecheck: 'tsc --noEmit && tsc -p tsconfig.main.json --noEmit',
+            lint: 'eslint src --max-warnings 0',
+            'build:mac': 'pnpm build && electron-builder --mac',
+            'build:win': 'pnpm build && electron-builder --win',
+            'build:linux': 'pnpm build && electron-builder --linux',
+            package: 'pnpm build && electron-builder',
         },
         build: {
             appId: `dev.anhedral.${identifierSegment(projectName)}`,
@@ -52,13 +53,19 @@ function writePackageJson(dir, projectName) {
                 executableName: identifierSegment(projectName),
                 target: ['AppImage', 'deb'],
             },
-            ...updatePublish,
         },
         dependencies: DESKTOP_DEPENDENCIES.dependencies,
-        devDependencies: DESKTOP_DEPENDENCIES.devDependencies,
+        devDependencies: { ...DESKTOP_DEPENDENCIES.devDependencies, '@workspace/eslint-config': 'workspace:*' },
     }, null, 2) + '\n');
 }
 function writeTsConfig(dir) {
+    writeFile(path.join(dir, 'tsconfig.json'), JSON.stringify({
+        compilerOptions: { target: 'ES2022', lib: ['ES2022', 'DOM'], module: 'ESNext',
+            moduleResolution: 'Bundler', jsx: 'react-jsx', strict: true, skipLibCheck: true,
+            esModuleInterop: true, noEmit: true, types: ['node', 'vite/client'],
+            paths: { '@/*': ['./src/renderer/*'] } },
+        include: ['src/renderer/**/*', 'vite.config.ts'],
+    }, null, 2) + '\n');
     writeFile(path.join(dir, 'tsconfig.main.json'), JSON.stringify({
         compilerOptions: {
             target: 'ES2022',
@@ -135,16 +142,16 @@ function stop(child) {
   if (child && child.exitCode === null && !child.killed) child.kill('SIGTERM');
 }
 
+async function isServerReady(url) {
+  try { return (await fetch(url)).ok; }
+  catch { return false; }
+}
+
 async function waitForServer(server, url, timeoutMs = 30_000) {
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
     if (server.exitCode !== null) throw new Error('Vite exited before the dev server was ready.');
-    try {
-      const response = await fetch(url);
-      if (response.ok) return;
-    } catch {
-      // The server is still starting.
-    }
+    if (await isServerReady(url)) return;
     await new Promise((resolve) => setTimeout(resolve, 150));
   }
   throw new Error('Timed out waiting for Vite at ' + url + '.');
@@ -344,6 +351,7 @@ export function Button({ className, type = 'button', ...props }: React.ButtonHTM
 `);
     writeFile(path.join(dir, 'src/renderer/main.tsx'), `import React from 'react';
 import ReactDOM from 'react-dom/client';
+import { Button } from '@/components/ui/button';
 import './styles.css';
 
 function App() {
@@ -355,10 +363,7 @@ function App() {
           ${"Electron + shadcn/ui desktop client ready for your application."}
         </p>
       </section>
-
-
-
-
+      <Button className="self-start" onClick={() => window.location.reload()}>Reload</Button>
     </main>
   );
 }