create-payload-stack 0.3.0 → 0.5.0

package/README.md

@@ -6,11 +6,11 @@ Scaffold a SaaS on Payload CMS in one command.
 npx create-payload-stack@latest
 ```
 
-Seven prompts: project name, database (PostgreSQL, MongoDB, SQLite, Vercel Postgres), connection string, sign-in methods, organizations, billing, media storage (skip for local disk, or Vercel Blob, AWS S3, Cloudflare R2, Azure Blob Storage, Google Cloud Storage, Uploadthing). The CLI downloads [Payload Stack](https://www.payloadstack.com), writes your answers into `src/stack.config.ts`, swaps the Payload database adapter, wires the storage adapter into `payload.config.ts`, generates `.env` with fresh secrets, installs dependencies and initializes git.
+Nine prompts: project name, database (PostgreSQL, MongoDB, SQLite, Vercel Postgres), connection string, sign-in methods, organizations, billing, media storage (skip for local disk, or Vercel Blob, AWS S3, Cloudflare R2, Azure Blob Storage, Google Cloud Storage, Uploadthing), transactional emails (edit copy in the Payload admin, or keep React Email components in code) and cookie consent (banner with audited legal pages, or plain legal pages). The CLI downloads [Payload Stack](https://www.payloadstack.com), writes your answers into `src/stack.config.ts`, swaps the Payload database adapter, wires the storage adapter into `payload.config.ts`, generates `.env` with fresh secrets, installs dependencies and initializes git.
 
 ```bash
 # non-interactive
-npx create-payload-stack@latest ridgeline -d postgres --auth email-password,magic-link,passkey --social github --billing organization --storage vercel-blob -y
+npx create-payload-stack@latest ridgeline -d postgres --auth email-password,magic-link,passkey --social github --billing organization --storage vercel-blob --emails --consent -y
 ```
 
 Run `npx create-payload-stack@latest --help` for every flag. Documentation: https://payload.solutions/docs/payload-stack

package/dist/index.js

@@ -68,6 +68,120 @@ function defaultConnectionString(db, projectSlug) {
   return `${db.connectionPrefix}${projectSlug}${db.connectionSuffix}`;
 }
 
+// src/scheduler.ts
+import { cp } from "fs/promises";
+import { existsSync } from "fs";
+import path2 from "path";
+
+// src/variants.ts
+import { rm } from "fs/promises";
+import path from "path";
+var VARIANT_DIR = "variants";
+function variantPath(step) {
+  return path.join(VARIANT_DIR, step);
+}
+async function removeVariants(directory) {
+  await rm(path.join(directory, VARIANT_DIR), { force: true, recursive: true });
+}
+
+// src/scheduler.ts
+var SCHEDULER_PACKAGE = "@payload-solutions/plugin-action-scheduler";
+var SCHEDULER_VERSION = "0.2.0";
+var VARIANT_SCHEDULER = variantPath("scheduler-plugin");
+var SEAM_FILES = ["plugin.ts", "jobs.ts", "hooks.ts"];
+var ACTION_DIR = "actions";
+var RUNNER_KEYS = ["clock", "vercel", "server", "later"];
+var DOCS = "https://payload.solutions/docs/payload-stack/scheduling";
+var ALTERNATIVES = [
+  "#   - Payload Clock: https://payloadclock.com (free; retries and alerts, works on any host)",
+  '#   - Vercel cron: a "crons" entry in vercel.json hitting the same path',
+  "#   - Long-lived server: RUN_JOBS_IN_PROCESS=true (never on serverless)",
+  "#   - Any cron you already have: curl the endpoint with the CRON_SECRET bearer token",
+  "#   - By hand: Scheduled Actions -> Run queue, in the admin",
+  `#   ${DOCS}`
+];
+var RUNNER_CHOICES = {
+  clock: {
+    label: "Payload Clock",
+    hint: "free hosted clock, retries and alerts, any host",
+    cronSecret: true,
+    inProcess: false,
+    next: () => [
+      "# scheduled actions need a clock. Sign up at https://payloadclock.com (free), point it at",
+      "#   POST/GET /api/payload-jobs/run?allQueues=true  with the CRON_SECRET in .env",
+      "# or use one of the others:",
+      ...ALTERNATIVES.slice(1)
+    ]
+  },
+  vercel: {
+    label: "Vercel cron",
+    hint: "vercel.json; once a minute on Pro, once a day on Hobby",
+    cronSecret: true,
+    inProcess: false,
+    next: () => [
+      "# vercel.json runs the queue every minute (Hobby plans get one run a day, which is coarse",
+      "#   for a scheduler: https://payloadclock.com is free and runs every minute on any plan)",
+      "# add CRON_SECRET from .env to the Vercel project: Vercel sends it as the bearer token",
+      ...ALTERNATIVES
+    ]
+  },
+  server: {
+    label: "This server",
+    hint: "RUN_JOBS_IN_PROCESS=true; docker, Fly, Railway, a VM",
+    cronSecret: true,
+    inProcess: true,
+    next: () => [
+      "# RUN_JOBS_IN_PROCESS=true in .env runs the queue in this process, every minute.",
+      "#   Never set it on Vercel or another serverless host, and run one instance with it.",
+      ...ALTERNATIVES
+    ]
+  },
+  later: {
+    label: "Decide later",
+    hint: "nothing runs the queue; the admin Run queue button still does",
+    cronSecret: false,
+    inProcess: false,
+    next: () => [
+      "# nothing runs the queue yet, so scheduled actions wait. Pick one when you deploy:",
+      ...ALTERNATIVES
+    ]
+  }
+};
+function swapSchedulerPackages(packageJson, enabled) {
+  const deps = { ...packageJson.dependencies };
+  const devDeps = { ...packageJson.devDependencies };
+  delete devDeps[SCHEDULER_PACKAGE];
+  if (enabled) deps[SCHEDULER_PACKAGE] = SCHEDULER_VERSION;
+  else delete deps[SCHEDULER_PACKAGE];
+  return { ...packageJson, dependencies: sortKeys(deps), devDependencies: sortKeys(devDeps) };
+}
+function sortKeys(obj) {
+  return Object.fromEntries(Object.entries(obj).sort(([a], [b]) => a.localeCompare(b)));
+}
+async function applySchedulerChoice(directory, enabled) {
+  if (!enabled) return;
+  const variant = path2.join(directory, VARIANT_SCHEDULER);
+  if (!existsSync(variant)) {
+    throw new Error(`The template is missing ${VARIANT_SCHEDULER}; it cannot scaffold with the scheduler.`);
+  }
+  for (const name of SEAM_FILES) {
+    await cp(path2.join(variant, name), path2.join(directory, "src/scheduler", name));
+  }
+  await cp(path2.join(variant, ACTION_DIR), path2.join(directory, "src/scheduler", ACTION_DIR), { recursive: true });
+  await cp(path2.join(variant, "tests/scheduler.spec.ts"), path2.join(directory, "tests/unit/scheduler.spec.ts"));
+}
+function renderVercelJson() {
+  return `${JSON.stringify(
+    {
+      $schema: "https://openapi.vercel.sh/vercel.json",
+      crons: [{ path: "/api/payload-jobs/run?allQueues=true", schedule: "* * * * *" }]
+    },
+    null,
+    2
+  )}
+`;
+}
+
 // src/storage.ts
 var LOCAL_STORAGE_CONFIG = `// Local disk (./media): fine for development, lost on redeploy on Vercel and other ephemeral hosts.
 // Move uploads to Vercel Blob, S3, R2, Azure, GCS or Uploadthing: https://payload.solutions/docs/payload-stack/storage`;
@@ -249,6 +363,13 @@ function helpText(version2) {
         --no-organizations        Disable organizations
         --billing <mode>          organization | user | none
         --storage <adapter>       ${STORAGE_KEYS.join(" | ")} (none = local disk)
+        --emails                  Edit transactional email copy in the Payload admin
+        --no-emails               Keep emails as React Email components in code
+        --consent                 Cookie banner and audited legal pages (Payload Consent)
+        --no-consent              Plain legal pages, no banner
+        --scheduler               Scheduled and recurring actions (Payload Action Scheduler)
+        --no-scheduler            No scheduler
+        --runner <kind>           ${RUNNER_KEYS.join(" | ")} (what runs the queue; default: clock)
         --use-pnpm | --use-npm | --use-yarn | --use-bun
         --no-install              Skip dependency installation
         --no-git                  Skip git init
@@ -281,6 +402,10 @@ function parse(argv) {
       organizations: { type: "boolean" },
       billing: { type: "string" },
       storage: { type: "string" },
+      emails: { type: "boolean" },
+      consent: { type: "boolean" },
+      scheduler: { type: "boolean" },
+      runner: { type: "string" },
       "use-pnpm": { type: "boolean" },
       "use-npm": { type: "boolean" },
       "use-yarn": { type: "boolean" },
@@ -306,6 +431,10 @@ function parse(argv) {
       organizations: values.organizations,
       billing: values.billing,
       storage: values.storage,
+      emails: values.emails,
+      consent: values.consent,
+      scheduler: values.scheduler,
+      runner: values.runner,
       packageManager,
       install: values.install ?? true,
       git: values.git ?? true,
@@ -323,18 +452,161 @@ function parse(argv) {
 // src/cli.ts
 import * as p from "@clack/prompts";
 import { execa as execa2 } from "execa";
-import { existsSync as existsSync3 } from "fs";
-import path3 from "path";
+import { existsSync as existsSync6 } from "fs";
+import path7 from "path";
 import pc2 from "picocolors";
 
 // src/configure.ts
 import { readFile, writeFile } from "fs/promises";
-import path from "path";
+import path5 from "path";
+
+// src/consent.ts
+import { cp as cp2, rm as rm2, rmdir } from "fs/promises";
+import { existsSync as existsSync2 } from "fs";
+import path3 from "path";
+var CONSENT_PACKAGE = "@payload-solutions/plugin-consent";
+var CONSENT_REACT_PACKAGE = "@payload-solutions/consent-react";
+var CONSENT_VERSION = "0.1.0";
+var CONSENT_PACKAGES = {
+  [CONSENT_PACKAGE]: CONSENT_VERSION,
+  [CONSENT_REACT_PACKAGE]: CONSENT_VERSION
+};
+var VARIANT_CONSENT = variantPath("consent-plugin");
+var SEAM_FILES2 = [
+  "plugin.ts",
+  "collections.ts",
+  "seed.ts",
+  "consent-root.tsx",
+  "consent-settings-link.tsx",
+  "legal-page.tsx",
+  "legal-setup-notice.tsx"
+];
+var BANNER_FILES = ["consent-banner.tsx", "consent-preferences-dialog.tsx"];
+var TEMPLATE_LEGAL_FILES = ["src/collections/LegalPages.ts", "src/seed/legal.ts", "tests/unit/seed-legal.spec.ts"];
+function swapConsentPackages(packageJson, enabled) {
+  const deps = { ...packageJson.dependencies };
+  const devDeps = { ...packageJson.devDependencies };
+  for (const pkg of Object.keys(CONSENT_PACKAGES)) {
+    delete devDeps[pkg];
+    if (enabled) deps[pkg] = CONSENT_PACKAGES[pkg];
+    else delete deps[pkg];
+  }
+  return { ...packageJson, dependencies: sortKeys2(deps), devDependencies: sortKeys2(devDeps) };
+}
+function sortKeys2(obj) {
+  return Object.fromEntries(Object.entries(obj).sort(([a], [b]) => a.localeCompare(b)));
+}
+async function applyConsentChoice(directory, enabled) {
+  if (!enabled) return;
+  const variant = path3.join(directory, VARIANT_CONSENT);
+  if (!existsSync2(variant)) {
+    throw new Error(`The template is missing ${VARIANT_CONSENT}; it cannot scaffold with consent.`);
+  }
+  for (const name of [...SEAM_FILES2, ...BANNER_FILES]) {
+    await cp2(path3.join(variant, name), path3.join(directory, "src/consent", name), { recursive: true });
+  }
+  await cp2(path3.join(variant, "tests/consent.spec.ts"), path3.join(directory, "tests/unit/consent.spec.ts"));
+  for (const name of TEMPLATE_LEGAL_FILES) {
+    await rm2(path3.join(directory, name), { force: true, recursive: true });
+  }
+  await rmdir(path3.join(directory, "src/seed")).catch(() => {
+  });
+}
+
+// src/emails.ts
+import { cp as cp3, rm as rm3 } from "fs/promises";
+import { existsSync as existsSync3 } from "fs";
+import path4 from "path";
+var EMAILS_PACKAGE = "@payload-solutions/plugin-emails";
+var EMAILS_VERSION = "0.1.0";
+var REACT_EMAIL_COMPONENTS = ["@react-email/components", "^1.0.12"];
+var REACT_EMAIL_ONLY_PACKAGES = {
+  "@react-email/render": "^2.1.0",
+  "react-email": "^6.9.3"
+};
+var EMAIL_DEV_SCRIPT = ["email:dev", "email dev --dir src/components/auth/email --port 3001"];
+var VARIANT_EMAILS = variantPath("emails-plugin");
+var IMPORT_MARKER = "// emails-plugin-import";
+var CONFIG_START = "// emails-plugin-config-start";
+var CONFIG_END = "// emails-plugin-config-end";
+var IMPORTS = `${IMPORT_MARKER}
+import { emailsPlugin } from '${EMAILS_PACKAGE}'
+import { emailDefinitions } from '@/emails/definitions'
+import { StackEmailTemplate } from '@/emails/template'
+import { globalVariableManifest, globalVariables } from '@/emails/variables'`;
+var REGISTRATION = `plugins.push(
+  emailsPlugin({
+    // The catalogue, filtered by the features in stack.config.ts (src/emails/definitions).
+    emails: emailDefinitions,
+    // Branding lives in code; editors own the words (src/emails/template.tsx).
+    templates: { default: StackEmailTemplate },
+    // {{site.name}}, {{support.email}}, {{url.dashboard}} \u2026 in every email (src/emails/variables.ts).
+    globalVariables,
+    globalVariableManifest,
+    // Every send recorded, for 90 days. Set enabled: false to keep no record at all.
+    log: { enabled: true, retentionDays: 90 },
+    settings: { mediaCollection: 'media' },
+  }),
+)`;
+function addEmailsPlugin(payloadConfigSource) {
+  if (!payloadConfigSource.includes(IMPORT_MARKER)) {
+    throw new Error(`payload.config.ts is missing the "${IMPORT_MARKER}" marker`);
+  }
+  const start = payloadConfigSource.indexOf(CONFIG_START);
+  const end = payloadConfigSource.indexOf(CONFIG_END);
+  if (start === -1 || end === -1 || end < start) {
+    throw new Error(`payload.config.ts is missing the emails plugin markers`);
+  }
+  const withImports = payloadConfigSource.replace(IMPORT_MARKER, IMPORTS);
+  const at = withImports.indexOf(CONFIG_START);
+  const to = withImports.indexOf(CONFIG_END);
+  return `${withImports.slice(0, at)}${CONFIG_START}
+${REGISTRATION}
+${withImports.slice(to)}`;
+}
+function swapEmailsPackages(packageJson, enabled) {
+  const deps = { ...packageJson.dependencies };
+  const devDeps = { ...packageJson.devDependencies };
+  const scripts = { ...packageJson.scripts };
+  delete devDeps[EMAILS_PACKAGE];
+  delete devDeps[REACT_EMAIL_COMPONENTS[0]];
+  if (enabled) {
+    deps[EMAILS_PACKAGE] = EMAILS_VERSION;
+    deps[REACT_EMAIL_COMPONENTS[0]] = REACT_EMAIL_COMPONENTS[1];
+    for (const pkg of Object.keys(REACT_EMAIL_ONLY_PACKAGES)) delete deps[pkg];
+    delete scripts[EMAIL_DEV_SCRIPT[0]];
+  } else {
+    delete deps[EMAILS_PACKAGE];
+    delete deps[REACT_EMAIL_COMPONENTS[0]];
+    Object.assign(deps, REACT_EMAIL_ONLY_PACKAGES);
+    scripts[EMAIL_DEV_SCRIPT[0]] = EMAIL_DEV_SCRIPT[1];
+  }
+  return { ...packageJson, dependencies: sortKeys3(deps), devDependencies: sortKeys3(devDeps), scripts: sortKeys3(scripts) };
+}
+function sortKeys3(obj) {
+  return Object.fromEntries(Object.entries(obj).sort(([a], [b]) => a.localeCompare(b)));
+}
+var REACT_EMAIL_FILES = ["src/emails/send.ts", "src/components/auth/email"];
+async function applyEmailsChoice(directory, enabled) {
+  const variant = path4.join(directory, VARIANT_EMAILS);
+  if (enabled) {
+    if (!existsSync3(variant)) {
+      throw new Error(`The template is missing ${VARIANT_EMAILS}; it cannot scaffold with emails.`);
+    }
+    for (const name of ["index.ts", "hooks.ts", "template.tsx", "variables.ts", "definitions"]) {
+      await cp3(path4.join(variant, name), path4.join(directory, "src/emails", name), { recursive: true });
+    }
+    await cp3(path4.join(variant, "tests/emails.spec.ts"), path4.join(directory, "tests/unit/emails.spec.ts"));
+    for (const name of REACT_EMAIL_FILES) {
+      await rm3(path4.join(directory, name), { force: true, recursive: true });
+    }
+  }
+}
 
 // src/utils.ts
 import slugifyBase from "@sindresorhus/slugify";
 import { randomBytes } from "crypto";
-import { existsSync, readdirSync } from "fs";
+import { existsSync as existsSync4, readdirSync } from "fs";
 import { execa } from "execa";
 function slugify(input) {
   return slugifyBase(input.trim()).replace(/^-+|-+$/g, "") || "my-saas";
@@ -343,7 +615,7 @@ function generateSecret(bytes = 32) {
   return randomBytes(bytes).toString("base64url");
 }
 function isDirectoryEmpty(dir) {
-  if (!existsSync(dir)) return true;
+  if (!existsSync4(dir)) return true;
   const entries = readdirSync(dir).filter((e) => ![".git", ".DS_Store"].includes(e));
   return entries.length === 0;
 }
@@ -408,6 +680,18 @@ function renderStackConfig(o) {
       },
     ],
   },`;
+  const legalBlock = o.consent ? `  legal: {
+    company: '${o.name.replace(/'/g, "\\'")} Ltd',
+    jurisdiction: 'Ireland',
+    // The seeded legal pages are written from here. Fill these in before you publish them:
+    // \`npx payload-consent scan\` lists every value still left as a placeholder.
+    // https://payload.solutions/docs/plugins/payload-consent/audit
+    legalName: '${o.name.replace(/'/g, "\\'")} Ltd',
+    address: '[REGISTERED ADDRESS]',
+  },` : `  legal: {
+    company: '${o.name.replace(/'/g, "\\'")} Ltd',
+    jurisdiction: 'Ireland',
+  },`;
   return `import { defineStack } from '@/lib/stack'
 
 /**
@@ -450,10 +734,7 @@ ${billingBlock}
     sendPII: false,
   },
 
-  legal: {
-    company: '${o.name.replace(/'/g, "\\'")} Ltd',
-    jurisdiction: 'Ireland',
-  },
+${legalBlock}
 
   nav: [${o.billing !== "none" ? "{ label: 'Pricing', href: '/pricing' }, " : ""}{ label: 'Docs', href: 'https://payload.solutions/docs/payload-stack' }],
 
@@ -461,24 +742,24 @@ ${billingBlock}
 })
 `;
 }
-var IMPORT_MARKER = "// database-adapter-import";
-var CONFIG_START = "// database-adapter-config-start";
-var CONFIG_END = "// database-adapter-config-end";
+var IMPORT_MARKER2 = "// database-adapter-import";
+var CONFIG_START2 = "// database-adapter-config-start";
+var CONFIG_END2 = "// database-adapter-config-end";
 function swapDatabaseAdapter(payloadConfigSource, db) {
-  const importLine = `${IMPORT_MARKER}
+  const importLine = `${IMPORT_MARKER2}
 import { ${db.importName} } from '${db.packageName}'`;
   const withImport = payloadConfigSource.replace(
-    new RegExp(`${escapeRegExp(IMPORT_MARKER)}\\nimport [^\\n]+\\n`),
+    new RegExp(`${escapeRegExp(IMPORT_MARKER2)}\\nimport [^\\n]+\\n`),
     `${importLine}
 `
   );
   if (withImport === payloadConfigSource && !payloadConfigSource.includes(importLine)) {
-    throw new Error(`payload.config.ts is missing the "${IMPORT_MARKER}" marker`);
+    throw new Error(`payload.config.ts is missing the "${IMPORT_MARKER2}" marker`);
   }
-  const start = withImport.indexOf(CONFIG_START);
-  const end = withImport.indexOf(CONFIG_END);
+  const start = withImport.indexOf(CONFIG_START2);
+  const end = withImport.indexOf(CONFIG_END2);
   if (start === -1 || end === -1) throw new Error(`payload.config.ts is missing the database adapter markers`);
-  return `${withImport.slice(0, start)}${CONFIG_START}
+  return `${withImport.slice(0, start)}${CONFIG_START2}
   ${db.config}
   ${withImport.slice(end)}`;
 }
@@ -523,7 +804,7 @@ function swapStoragePackage(packageJson, storage) {
     if (pkg !== storage?.packageName) delete deps[pkg];
   }
   if (storage) deps[storage.packageName] = payloadVersion;
-  return { ...packageJson, dependencies: sortKeys(deps) };
+  return { ...packageJson, dependencies: sortKeys4(deps) };
 }
 function storageChoice(key) {
   return key === "none" ? null : STORAGE_CHOICES[key];
@@ -535,7 +816,16 @@ function swapDatabasePackage(packageJson, db) {
     if (other.packageName !== db.packageName) delete deps[other.packageName];
   }
   deps[db.packageName] = payloadVersion;
-  return { ...packageJson, dependencies: sortKeys(deps) };
+  return { ...packageJson, dependencies: sortKeys4(deps) };
+}
+function stripWorkspaceDependencies(packageJson) {
+  const next = { ...packageJson };
+  for (const field of ["dependencies", "devDependencies", "peerDependencies"]) {
+    const deps = next[field];
+    if (!deps) continue;
+    next[field] = Object.fromEntries(Object.entries(deps).filter(([, version2]) => !version2.startsWith("workspace:")));
+  }
+  return next;
 }
 function renameProject(packageJson, slug) {
   const next = { ...packageJson, name: slug, version: "0.1.0", private: true };
@@ -549,7 +839,10 @@ function renderEnv(example, o) {
     DATABASE_URL: o.connectionString,
     PAYLOAD_SECRET: generateSecret(24),
     BETTER_AUTH_SECRET: generateSecret(32),
-    NEXT_PUBLIC_APP_URL: o.appUrl ?? "http://localhost:3000"
+    NEXT_PUBLIC_APP_URL: o.appUrl ?? "http://localhost:3000",
+    // A clock needs a secret to get past jobs.access.run; without one that endpoint is admin-only.
+    ...o.cronSecret ? { CRON_SECRET: generateSecret(32) } : {},
+    ...o.inProcessRunner ? { RUN_JOBS_IN_PROCESS: "true" } : {}
   };
   const lines = example.split("\n").map((line) => {
     const m = /^#?\s?([A-Z0-9_]+)=(.*)$/.exec(line);
@@ -560,7 +853,7 @@ function renderEnv(example, o) {
   });
   return lines.join("\n");
 }
-function sortKeys(obj) {
+function sortKeys4(obj) {
   return Object.fromEntries(Object.entries(obj).sort(([a], [b]) => a.localeCompare(b)));
 }
 function escapeRegExp(s) {
@@ -568,19 +861,42 @@ function escapeRegExp(s) {
 }
 async function configureProject(o) {
   const db = DB_CHOICES[o.db];
-  const read = (rel) => readFile(path.join(o.directory, rel), "utf8");
-  const write = (rel, content) => writeFile(path.join(o.directory, rel), content);
+  const read = (rel) => readFile(path5.join(o.directory, rel), "utf8");
+  const write = (rel, content) => writeFile(path5.join(o.directory, rel), content);
   await write("src/stack.config.ts", renderStackConfig(o));
   const storage = storageChoice(o.storage);
   const payloadConfig = await read("src/payload.config.ts");
-  await write("src/payload.config.ts", swapStorageAdapter(swapDatabaseAdapter(payloadConfig, db), storage));
+  const withAdapters = swapStorageAdapter(swapDatabaseAdapter(payloadConfig, db), storage);
+  await write("src/payload.config.ts", o.emails ? addEmailsPlugin(withAdapters) : withAdapters);
+  await applyEmailsChoice(o.directory, o.emails);
+  await applyConsentChoice(o.directory, o.consent);
+  await applySchedulerChoice(o.directory, o.scheduler);
+  await removeVariants(o.directory);
+  if (o.scheduler && o.runner === "vercel") {
+    await write("vercel.json", renderVercelJson());
+  }
   const pkg = JSON.parse(await read("package.json"));
+  const configured = swapSchedulerPackages(
+    swapConsentPackages(
+      swapEmailsPackages(swapStoragePackage(swapDatabasePackage(pkg, db), storage), o.emails),
+      o.consent
+    ),
+    o.scheduler
+  );
   await write(
     "package.json",
-    JSON.stringify(renameProject(swapStoragePackage(swapDatabasePackage(pkg, db), storage), o.slug), null, 2) + "\n"
+    JSON.stringify(renameProject(stripWorkspaceDependencies(configured), o.slug), null, 2) + "\n"
   );
+  const runner = RUNNER_CHOICES[o.runner];
   const example = await read(".env.example");
-  await write(".env", renderEnv(example, { connectionString: o.connectionString }));
+  await write(
+    ".env",
+    renderEnv(example, {
+      connectionString: o.connectionString,
+      cronSecret: o.scheduler && runner.cronSecret,
+      inProcessRunner: o.scheduler && runner.inProcess
+    })
+  );
 }
 
 // src/options.ts
@@ -588,9 +904,9 @@ var AUTH_METHODS = ["email-password", "magic-link", "passkey"];
 var SOCIAL_PROVIDERS = ["google", "github"];
 
 // src/template.ts
-import { cp, mkdir, rm } from "fs/promises";
-import { existsSync as existsSync2 } from "fs";
-import path2 from "path";
+import { cp as cp4, mkdir, rm as rm4 } from "fs/promises";
+import { existsSync as existsSync5 } from "fs";
+import path6 from "path";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
 import * as tar from "tar";
@@ -618,29 +934,30 @@ Check your network, or pass --local-template <path> to scaffold from a local che
       }
     })
   );
-  if (!existsSync2(path2.join(dest, "package.json"))) {
+  if (!existsSync5(path6.join(dest, "package.json"))) {
     throw new Error(`The downloaded archive did not contain ${TEMPLATE_PATH}/package.json (branch "${branch}").`);
   }
 }
 async function copyLocalTemplate({ from, dest }) {
-  const source = path2.resolve(from);
-  if (!existsSync2(path2.join(source, "package.json"))) {
+  const source = path6.resolve(from);
+  if (!existsSync5(path6.join(source, "package.json"))) {
     throw new Error(`--local-template must point at a directory containing package.json (got ${source})`);
   }
   await mkdir(dest, { recursive: true });
-  await cp(source, dest, {
+  await cp4(source, dest, {
     recursive: true,
     filter: (src) => {
-      const rel = path2.relative(source, src);
-      const top = rel.split(path2.sep)[0];
+      const rel = path6.relative(source, src);
+      const top = rel.split(path6.sep)[0];
       return !["node_modules", ".next", ".turbo", ".env", "test-results", "playwright-report", "next-env.d.ts", "tsconfig.tsbuildinfo", "CLAUDE.md"].includes(top ?? "");
     }
   });
-  await rm(path2.join(dest, "CLAUDE.md"), { force: true });
+  await rm4(path6.join(dest, "CLAUDE.md"), { force: true });
 }
 
 // src/cli.ts
-var DOCS = "https://payload.solutions/docs/payload-stack";
+var DOCS2 = "https://payload.solutions/docs/payload-stack";
+var CONSENT_DOCS = "https://payload.solutions/docs/plugins/payload-consent/audit";
 function bail(message = "Cancelled.") {
   p.cancel(message);
   process.exit(1);
@@ -674,7 +991,7 @@ async function run(flags, positionalName) {
     })
   );
   const slug = slugify(name);
-  const directory = path3.resolve(process.cwd(), slug);
+  const directory = path7.resolve(process.cwd(), slug);
   if (!isDirectoryEmpty(directory)) {
     bail(`Directory ./${slug} already exists and is not empty.`);
   }
@@ -759,6 +1076,46 @@ async function run(flags, positionalName) {
       ]
     })
   ));
+  const emails = flags.emails ?? (flags.defaults ? true : guard(
+    await p.confirm({
+      message: "Transactional emails",
+      initialValue: true,
+      active: "Editable in the admin (Payload Emails)",
+      inactive: "React Email components in code"
+    })
+  ));
+  const consent = flags.consent ?? (flags.defaults ? true : guard(
+    await p.confirm({
+      message: "Cookie consent and legal pages",
+      initialValue: true,
+      active: "Banner, consent records and audited legal pages (Payload Consent)",
+      inactive: "Plain legal pages, no banner"
+    })
+  ));
+  const scheduler = flags.scheduler ?? (flags.defaults ? true : guard(
+    await p.confirm({
+      message: "Scheduled and recurring actions",
+      initialValue: true,
+      active: "Trial reminders, dunning, sweeps, and a ledger in the admin (Payload Action Scheduler)",
+      inactive: "No scheduler"
+    })
+  ));
+  const runnerFlag = flags.runner;
+  if (runnerFlag && !RUNNER_KEYS.includes(runnerFlag)) {
+    bail(`Unknown value "${flags.runner}" for --runner. Allowed: ${RUNNER_KEYS.join(", ")}`);
+  }
+  if (runnerFlag && !scheduler) bail("--runner needs --scheduler. Nothing runs a queue that does not exist.");
+  const runner = !scheduler ? "later" : runnerFlag ?? (flags.defaults ? "clock" : guard(
+    await p.select({
+      message: "What runs the queue",
+      initialValue: "clock",
+      options: RUNNER_KEYS.map((key) => ({
+        value: key,
+        label: RUNNER_CHOICES[key].label,
+        hint: RUNNER_CHOICES[key].hint
+      }))
+    })
+  ));
   const packageManager = flags.packageManager ?? await detectPackageManager();
   const options = {
     name,
@@ -771,6 +1128,10 @@ async function run(flags, positionalName) {
     organizations,
     billing,
     storage,
+    emails,
+    consent,
+    scheduler,
+    runner,
     packageManager,
     install: flags.install,
     git: flags.git
@@ -806,7 +1167,7 @@ async function run(flags, positionalName) {
 ${error instanceof Error ? error.message.split("\n")[0] : ""}`);
     }
   }
-  if (options.git && !existsSync3(path3.join(directory, ".git"))) {
+  if (options.git && !existsSync6(path7.join(directory, ".git"))) {
     try {
       await execa2("git", ["init", "-b", "main"], { cwd: directory });
       await execa2("git", ["add", "-A"], { cwd: directory });
@@ -823,10 +1184,16 @@ ${error instanceof Error ? error.message.split("\n")[0] : ""}`);
     ...billing !== "none" ? ["# add STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET and NEXT_PUBLIC_STRIPE_PRICE_* to .env when you are ready for billing"] : [],
     ...storage !== "none" ? [`# add ${listWords(STORAGE_CHOICES[storage].envVars)} to .env to store uploads in ${STORAGE_CHOICES[storage].label} (local disk until then)`] : [],
     runCommand(packageManager, "dev"),
-    "open http://localhost:3000/admin"
+    "open http://localhost:3000/admin",
+    ...emails ? ["# email copy is under Emails in the admin; the design is src/emails/template.tsx"] : [],
+    ...consent ? [
+      "# the seeded legal pages are templates, not policy: the homepage shows the six steps in development",
+      `# ${CONSENT_DOCS}`
+    ] : [],
+    ...scheduler ? ["# scheduled actions are under System -> Scheduled Actions in the admin", ...RUNNER_CHOICES[runner].next()] : []
   ];
   p.note(steps.join("\n"), "Done. Next steps:");
-  p.outro(`Docs: ${pc2.underline(DOCS)}`);
+  p.outro(`Docs: ${pc2.underline(DOCS2)}`);
 }
 
 // src/index.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-payload-stack",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Scaffold a SaaS on Payload CMS: Better Auth, organizations, Stripe subscriptions and a shadcn dashboard, in one command.",
   "keywords": [
     "payload",