create-raredays-app 0.1.0

package/skillex/private/contribute.md

@@ -0,0 +1,193 @@
+---
+name: "Contributing to create-raredays-app"
+description: Deep guide to the app scaffolder — CLI flow, CRDA placeholder tokens, composeRuntime/composeHandlers internals, template file trees, customiseSiteSpec regex, fragment loading, env generation, --dev flag.
+topics: [scaffolding, contributing]
+tags: [scaffolding, cli, contributing]
+---
+
+# Contributing to create-raredays-app
+
+Location: `workspaces/app/cli/create-raredays-app/`
+
+## CLI Entry (`bin/index.js`)
+
+Plain Node.js script (no build step). Uses `parseArgs` for flags:
+
+| Flag                 | Default        | Purpose                                     |
+| -------------------- | -------------- | ------------------------------------------- |
+| `--template <name>`  | `"full-stack"` | Template to scaffold                        |
+| `--modules <list>`   | —              | Comma-separated module keys                 |
+| `--vendors <list>`   | —              | Comma-separated `module:vendor` pairs       |
+| `--remote-url <url>` | —              | Git remote origin URL                       |
+| `--no-git`           | —              | Skip git init                               |
+| `--no-install`       | —              | Skip pnpm install                           |
+| `--dev`              | —              | Rewrite `@raredays/*` deps to `workspace:*` |
+
+### Interactive Mode (no positional arg)
+
+Prompts in order via `@clack/prompts`:
+
+1. Project name (validates non-empty, no existing dir)
+2. Template selection: `static` | `client` | `full-stack`
+3. Display name (defaults to project name)
+4. Canonical domain (validates `/^[a-z0-9.-]+\.[a-z]{2,}$/i`)
+5. Brand primary color (hex, defaults `#10b981`, validates `/^#[0-9a-fA-F]{3,8}$/`)
+6. Module selection (multiselect, filtered by template's `templates` field)
+7. Vendor selection per module (format: `billing:stripe`)
+8. Git remote URL (optional)
+9. Init git repo (default: true)
+10. Run `pnpm install` (default: true)
+
+### Scaffold Flow
+
+1. Error if target dir exists
+2. Copy `templates/{template}/` recursively
+3. Rename stub files: `_gitignore` → `.gitignore`, `_npmrc` → `.npmrc`
+4. Derive slug: trim, lowercase, replace `[^a-z0-9]+` with `-`, strip leading/trailing `-`
+5. Substitute `__SLUG__` in `site.spec.ts`
+6. Apply `customiseSiteSpec()` regex replacements
+7. Load fragments, merge deps, copy fragment `files/` dirs, compose runtime
+8. Compose mock handlers if template ≠ `static`
+9. Merge deps into `package.json`, apply `--dev` rewrite if flagged
+10. Write `.env.example` if any env vars collected
+11. `git init --quiet --initial-branch=main` (+ remote if specified)
+12. `pnpm install` with `stdio: "inherit"`
+
+## CRDA Placeholder Tokens
+
+### In `app/lib/runtime.ts`:
+
+| Token (exact string) | Replaced With                                                           | Empty Behavior                                          |
+| -------------------- | ----------------------------------------------------------------------- | ------------------------------------------------------- |
+| `// CRDA:imports`    | Fragment `runtime/imports.ts` concatenated with newlines                | Kept as-is                                              |
+| `// CRDA:config`     | Fragment `runtime/config.ts` concatenated with double newlines          | Comment: `// CRDA:config (no additional modules wired)` |
+| `  // CRDA:ports`    | Fragment `runtime/ports.ts` concatenated, trimmed (note 2-space indent) | Kept as-is                                              |
+| `// CRDA:exports`    | Fragment `runtime/exports.ts` concatenated with double newlines         | Kept as-is                                              |
+
+### In `mocks/handlers.ts`:
+
+| Token (exact string)     | Replaced With                                           |
+| ------------------------ | ------------------------------------------------------- |
+| `// CRDA:mocks-imports`  | Import statements: `import { <named> } from <package>;` |
+| `  // CRDA:mocks-spread` | Spread entries: `  <named>,` (2-space indent)           |
+
+## composeRuntime(source, fragments)
+
+Iterates fragments in order, collects all slot code per token, replaces all four tokens in a single pass.
+
+## composeHandlers(source, vendorMocks)
+
+Builds import list + spread list from vendor mock metadata, replaces both tokens.
+
+## customiseSiteSpec(filePath, opts)
+
+Three regex replacements on `site.spec.ts`:
+
+1. Display name: `/name:\s*"[^"]*"/` → `name: ${JSON.stringify(opts.displayName)}`
+2. Canonical domain: `/canonicalDomain:\s*"[^"]*/` → `canonicalDomain: ${JSON.stringify(opts.canonicalDomain)}`
+3. Brand primary: `/primary:\s*"#[0-9a-fA-F]+"/` → `primary: ${JSON.stringify(opts.brandPrimary)}`
+
+`__SLUG__` token is a separate find-replace earlier in the flow.
+
+## Template File Trees
+
+### `full-stack` (39 files)
+
+```
+app/api/dev/{login,logout}/route.ts, app/api/widgets/route.ts
+app/demo/widgets/page.tsx, app/protected/page.tsx
+app/globals.css, app/home-auth-controls.tsx, app/layout.tsx, app/page.tsx
+app/lib/runtime.ts (CRDA placeholders), app/lib/runtime.test.ts
+app/theme.override.css
+db/index.ts, db/schema.ts, drizzle.config.ts
+instrumentation.ts
+mocks/browser.tsx, mocks/handlers.ts (CRDA placeholders), mocks/node.ts
+next.config.ts, oxfmt.config.ts, oxlint.config.ts, package.json
+postcss.config.mjs, scripts/build-theme.mjs, site.spec.ts
+stylelint.config.mjs, tsconfig.json, vitest.config.ts, vitest.setup.ts
+```
+
+### `client` (28 files)
+
+Same as full-stack minus `db/`, `drizzle.config.ts`, `app/api/widgets/`. Adds `app/api/backend/[...path]/route.ts` for upstream proxying and `app/lib/backend-client.ts`.
+
+### `static` (17 files)
+
+Minimal: no `app/lib/`, no `app/api/`, no `mocks/`, no `instrumentation.ts`, no tests, no DB. Just layout, page, styling, and build config.
+
+## Fragment Structure
+
+```
+scaffold-fragments/{key}/
+├── module.json          # Manifest
+├── runtime/
+│   ├── imports.ts       # Injected at // CRDA:imports
+│   ├── config.ts        # Injected at // CRDA:config
+│   ├── ports.ts         # Injected at   // CRDA:ports
+│   └── exports.ts       # Injected at // CRDA:exports
+└── files/               # Overlay into target app
+```
+
+### module.json Schema
+
+```json
+{
+  "key": "billing",
+  "label": "Billing (subscriptions + webhooks)",
+  "description": "...",
+  "deps": { "@raredays/billing": "0.0.1" },
+  "vendors": [
+    {
+      "key": "stripe",
+      "label": "Stripe",
+      "deps": { "@raredays/billing-stripe": "0.0.1" },
+      "env": ["STRIPE_SECRET_KEY", "STRIPE_WEBHOOK_SECRET"],
+      "mocks": { "package": "@raredays/billing-stripe/mocks", "named": "stripeMocks" }
+    }
+  ],
+  "templates": ["full-stack"]
+}
+```
+
+### Available Fragments
+
+| Fragment        | Templates          | Vendors       | Env Vars                                     |
+| --------------- | ------------------ | ------------- | -------------------------------------------- |
+| `billing`       | full-stack         | Stripe        | `STRIPE_SECRET_KEY`, `STRIPE_WEBHOOK_SECRET` |
+| `email`         | full-stack         | Resend        | `RESEND_API_KEY`                             |
+| `jobs`          | full-stack         | None          | —                                            |
+| `notifications` | full-stack         | None          | —                                            |
+| `telemetry`     | full-stack, client | Sentry, Axiom | `SENTRY_DSN`, `AXIOM_TOKEN`, `AXIOM_DATASET` |
+
+## .env.example Generation
+
+Only written if `envVars.length > 0`. Format:
+
+```
+# Environment variables required by the modules you selected.
+# Copy to .env.local and fill in real values before running.
+
+# Database (uncomment when wiring Drizzle queries)
+# DATABASE_URL=
+
+STRIPE_SECRET_KEY=
+STRIPE_WEBHOOK_SECRET=
+```
+
+## --dev Flag
+
+Rewrites every `@raredays/*` in both `dependencies` and `devDependencies` to `workspace:*`. Used for in-repo dogfooding (playground scaffolds).
+
+## Testing
+
+No unit tests. Validated by:
+
+- E2E scenarios in `/e2e/` (scaffold → build → serve → test)
+- Manual: `pnpm playground:reset && pnpm playground`
+
+## Build and Test
+
+```sh
+# No build step needed — plain Node.js script
+pnpm --filter create-raredays-app test  # if tests exist
+```

package/skillex/public/consumer.md

@@ -0,0 +1,157 @@
+---
+name: "Consuming create-raredays-app"
+description: How to scaffold new apps — interactive prompts sequence, CLI flags, three templates (full-stack/client/static) with output files, five available modules with vendor options, --dev flag for monorepo dogfooding.
+topics: [scaffolding, consuming]
+tags: [scaffolding, cli, consuming]
+---
+
+# Consuming create-raredays-app
+
+## Interactive Mode
+
+```sh
+pnpm create raredays-app
+```
+
+Prompts in order:
+
+1. **Project name** — directory name and package slug (kebab-case, 1–64 chars)
+2. **Template** — `full-stack`, `client`, or `static`
+3. **Display name** — human-readable (defaults to project name)
+4. **Canonical domain** — optional, hostname only (e.g., `example.com`)
+5. **Brand primary color** — hex value (defaults to `#10b981`)
+6. **Modules** — multiselect (not shown for `static`)
+7. **Vendors** — multiselect for selected modules
+8. **Git remote URL** — optional
+9. **Initialize git?** — default yes
+10. **Run pnpm install?** — default yes
+
+## Non-Interactive Mode
+
+```sh
+pnpm create raredays-app my-app \
+  --template full-stack \
+  --modules billing,email,telemetry \
+  --vendors billing:stripe,email:resend,telemetry:sentry,telemetry:axiom
+```
+
+## CLI Flags
+
+| Flag           | Description                                                           |
+| -------------- | --------------------------------------------------------------------- |
+| `--template`   | `full-stack` (default), `client`, or `static`                         |
+| `--modules`    | Comma-separated module keys                                           |
+| `--vendors`    | Comma-separated `MODULE:VENDOR` selectors                             |
+| `--remote-url` | Git remote origin URL                                                 |
+| `--no-git`     | Skip git initialization                                               |
+| `--no-install` | Skip `pnpm install`                                                   |
+| `--dev`        | Rewrite all `@raredays/*` deps to `workspace:*` (monorepo dogfooding) |
+
+## Templates
+
+### full-stack
+
+Complete Next.js + Drizzle ORM + PostgreSQL + framework modules.
+
+Key output files:
+
+- `app/lib/runtime.ts` — composition root with module ports wired
+- `db/schema.ts` + `db/index.ts` — Drizzle schema and client
+- `drizzle.config.ts` — Drizzle Kit configuration
+- `mocks/handlers.ts` — MSW handlers composed from vendor mocks
+- `site.spec.ts` — SiteSpec with your branding choices
+- `app/api/widgets/route.ts` — demo API endpoint
+- `instrumentation.ts` — telemetry instrumentation hook
+
+All five modules available. Scripts include `db:generate`, `db:migrate`, `db:studio`.
+
+### client
+
+Next.js BFF + SPA that proxies to an external backend.
+
+Key output files:
+
+- `app/lib/runtime.ts` — composition root (identity + mocks)
+- `app/api/backend/[...path]/route.ts` — backend proxy
+- `app/api/dev/login|logout/route.ts` — dev auth routes
+- `mocks/handlers.ts` — MSW handlers
+
+Only telemetry module available. No database.
+
+### static
+
+CDN/edge-deployable static site. No modules, no database, no API routes.
+
+Key output files:
+
+- `site.spec.ts` — SiteSpec configuration
+- `next.config.ts` — static export config
+
+## Available Modules
+
+| Module          | Label                       | Template           | Vendor Options |
+| --------------- | --------------------------- | ------------------ | -------------- |
+| `billing`       | Subscriptions + webhooks    | full-stack         | Stripe         |
+| `cms`           | Headless CMS + rich text    | full-stack, client | Hygraph        |
+| `email`         | Transactional email         | full-stack         | Resend         |
+| `identity`      | Auth, sessions, orgs, roles | full-stack, client | Better Auth    |
+| `jobs`          | Background jobs             | full-stack         | — (in-memory)  |
+| `notifications` | Multi-channel notifications | full-stack         | — (in-memory)  |
+| `telemetry`     | Logging, errors, metrics    | full-stack, client | Sentry, Axiom  |
+
+Identity is always wired with an in-memory dev provider (the template hard-codes
+`createInMemoryProvider` so `pnpm dev` works out of the box). Selecting
+`--modules identity --vendors identity:better-auth` adds the production adapter
+package, env vars, mock handlers, and a Next.js auth route stub — you then
+manually replace the in-memory provider in `app/lib/runtime.ts` with
+`createBetterAuthProvider({ auth })`.
+
+### Vendor Environment Variables
+
+When vendors are selected, `.env.example` is generated:
+
+```sh
+# billing (stripe)
+STRIPE_SECRET_KEY=
+STRIPE_WEBHOOK_SECRET=
+
+# cms (hygraph)
+HYGRAPH_ENDPOINT=
+HYGRAPH_TOKEN=
+
+# email (resend)
+RESEND_API_KEY=
+
+# identity (better-auth)
+BETTER_AUTH_SECRET=
+BETTER_AUTH_URL=
+
+# telemetry (sentry)
+SENTRY_DSN=
+
+# telemetry (axiom)
+AXIOM_TOKEN=
+AXIOM_DATASET=
+```
+
+## What You Get
+
+A fully configured project with:
+
+- `site.spec.ts` — SiteSpec with your name, domain, and brand color substituted
+- `app/lib/runtime.ts` — composition root with selected modules wired via slot injection
+- `app/theme.css` — generated `@theme` overrides from branding config
+- `next.config.ts` — wraps `withRaredays()`
+- `postcss.config.mjs` — re-exports from `@raredays/style/postcss`
+- `mocks/` — MSW setup with vendor-specific handlers (client/full-stack)
+- `.env.example` — required env vars for selected vendors
+
+## After Scaffolding
+
+```sh
+cd my-app
+pnpm install                    # if --no-install was used
+cp .env.example .env.local      # if modules with env vars
+pnpm dev                        # standard dev server
+pnpm dev:mocks                  # dev with MSW intercepting API calls
+```

package/templates/client/.storybook/main.ts

@@ -0,0 +1,77 @@
+import { dirname, resolve } from "node:path";
+import { createRequire } from "node:module";
+import type { StorybookConfig } from "@storybook/react-vite";
+import react from "@vitejs/plugin-react";
+import tailwindcss from "@tailwindcss/vite";
+
+// Storybook config for the scaffolded app.
+//
+// Loads stories from two sources, namespaced separately:
+//
+//   App/<...>                  → ../app/**/*.stories.@(ts|tsx)
+//                                ../src/**/*.stories.@(ts|tsx)
+//
+//   @raredays/components/<...> → resolved-package-root/dist/**/*.stories.js
+//
+// Framework stories are pre-compiled by the framework's build (vite
+// `preserveModules: true`) — `@/` aliases are already resolved, so
+// the consumer's Vite doesn't need any path-alias config to load
+// them. To add more framework packages with stories, add a matching
+// stories[] entry pointing at their dist/.
+//
+// We resolve `@raredays/components` via Node's module resolver rather
+// than a literal `../node_modules/...` path because pnpm hoists
+// workspace dependencies to the workspace root — under a workspace
+// install the package may not exist in the app's own node_modules at
+// all, and the literal path silently matches zero stories.
+//
+// `require.resolve("@raredays/components")` returns the package's
+// main entry (`dist/index.js`); we walk up to the package root so the
+// glob can target `dist/**/*.stories.js`. We avoid resolving
+// `@raredays/components/package.json` directly because the package's
+// `exports` map does not expose `./package.json`.
+//
+// Stories render in THIS Storybook's iframe — they inherit the
+// consumer's theme.override.css, RaredaysProvider, fonts, and any
+// other context loaded in .storybook/preview.ts. That's the whole
+// point: see how framework components look with YOUR theme applied,
+// not a generic one.
+const require = createRequire(import.meta.url);
+const componentsRoot = dirname(dirname(require.resolve("@raredays/components")));
+
+const config: StorybookConfig = {
+  framework: "@storybook/react-vite",
+  stories: [
+    {
+      directory: "../app",
+      files: "**/*.stories.@(ts|tsx)",
+      titlePrefix: "App",
+    },
+    {
+      directory: "../src",
+      files: "**/*.stories.@(ts|tsx)",
+      titlePrefix: "App",
+    },
+    {
+      directory: `${componentsRoot}/dist`,
+      files: "**/*.stories.js",
+      titlePrefix: "@raredays/components",
+    },
+  ],
+  addons: [],
+  typescript: {
+    check: false,
+    reactDocgen: "react-docgen-typescript",
+  },
+  viteFinal: async (viteConfig) => {
+    viteConfig.plugins = [...(viteConfig.plugins ?? []), react(), tailwindcss()];
+    viteConfig.resolve ??= {};
+    viteConfig.resolve.alias = {
+      ...(viteConfig.resolve.alias as Record<string, string>),
+      "@": resolve(import.meta.dirname, "../app"),
+    };
+    return viteConfig;
+  },
+};
+
+export default config;

package/templates/client/.storybook/preview.ts

@@ -0,0 +1,12 @@
+import type { Preview } from "@storybook/react-vite";
+import "../app/globals.css";
+
+const preview: Preview = {
+  parameters: {
+    controls: {
+      matchers: { color: /(background|color)$/i, date: /Date$/i },
+    },
+  },
+};
+
+export default preview;

package/templates/client/CLAUDE.md

@@ -0,0 +1,50 @@
+# Project conventions
+
+Always read `AGENTS.md` first — it lists every skill available via `@raredays/*`
+packages. Use them before authoring components, modules, or providers from
+scratch.
+
+## Quick orientation
+
+This app was scaffolded with `create-raredays-app` and consumes the RareDays
+framework via `@raredays/*` workspace deps. Conventions:
+
+- **Components**: prefer composing from `@raredays/components` (shadcn-flavored,
+  Tailwind v4, browser-tested with vitest+playwright). When you do author new
+  components, follow the patterns documented in
+  `pnpm exec skillex query --package @raredays/components`.
+- **Server logic**: use `@raredays/core`'s provider/port pattern. Identity,
+  billing, notifications, CMS, etc. are wired in `app/lib/runtime.ts` —
+  edit there to swap providers, don't sprinkle SDK calls through the codebase.
+- **Tests**: vitest. Browser-mode tests use the `.browser.test.tsx` suffix and
+  run separately from node-mode tests. Conformance harnesses live in each
+  module's `src/testing/` directory and exercise every provider against the
+  same invariants.
+- **Lint/format**: `pnpm check` runs lint + format-check + style + typecheck.
+  Pre-commit hook (if you add one) should call this.
+
+## Don't
+
+- Re-implement primitives that already exist in `@raredays/*`. Always query
+  skillex first.
+- Edit code in `node_modules/@raredays/*` directly. If a provider needs
+  changing, file a framework issue or PR upstream.
+- Commit code with failing lint/format/style/test. `pnpm check` should be
+  green before every commit.
+
+## Skillex
+
+Skills from installed `@raredays/*` packages are auto-discovered. To refresh
+the index after adding a new dependency:
+
+```sh
+pnpm exec skillex refresh
+```
+
+Query patterns:
+
+```sh
+pnpm exec skillex query --search "<concepts>"
+pnpm exec skillex query --package "@raredays/components"
+pnpm exec skillex query --topic identity
+```

package/templates/client/_claude/settings.json

@@ -0,0 +1,107 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "_comment": "Permissive defaults — agents can iterate without prompting on routine dev actions. Anything that mutates shared/remote state still requires explicit approval.",
+  "permissions": {
+    "allow": [
+      "Bash(pnpm install*)",
+      "Bash(pnpm run *)",
+      "Bash(pnpm exec *)",
+      "Bash(pnpm dev*)",
+      "Bash(pnpm build*)",
+      "Bash(pnpm test*)",
+      "Bash(pnpm lint*)",
+      "Bash(pnpm format*)",
+      "Bash(pnpm style*)",
+      "Bash(pnpm check*)",
+      "Bash(pnpm typecheck*)",
+      "Bash(pnpm db:*)",
+      "Bash(pnpm theme:build*)",
+      "Bash(pnpm dlx *)",
+      "Bash(pnpm --filter *)",
+      "Bash(pnpm -w *)",
+      "Bash(node *)",
+      "Bash(npx *)",
+      "Bash(git status*)",
+      "Bash(git diff*)",
+      "Bash(git log*)",
+      "Bash(git show*)",
+      "Bash(git branch*)",
+      "Bash(git ls-files*)",
+      "Bash(git ls-tree*)",
+      "Bash(git stash*)",
+      "Bash(git add*)",
+      "Bash(git checkout *)",
+      "Bash(git switch *)",
+      "Bash(git restore *)",
+      "Bash(git rev-parse*)",
+      "Bash(git remote -v)",
+      "Bash(git fetch*)",
+      "Bash(git pull --ff-only*)",
+      "Bash(mkdir *)",
+      "Bash(touch *)",
+      "Bash(ls *)",
+      "Bash(find *)",
+      "Bash(grep *)",
+      "Bash(rg *)",
+      "Bash(cat *)",
+      "Bash(head *)",
+      "Bash(tail *)",
+      "Bash(wc *)",
+      "Bash(sort *)",
+      "Bash(uniq *)",
+      "Bash(jq *)",
+      "Bash(curl http://localhost*)",
+      "Bash(curl http://127.0.0.1*)",
+      "Bash(pnpm exec skillex*)",
+      "Bash(pnpm exec playwright *)",
+      "Bash(pnpm exec vitest*)",
+      "Bash(pnpm exec drizzle-kit*)",
+      "Bash(pnpm exec next *)",
+      "Bash(pnpm exec tsc*)",
+      "Bash(pnpm exec oxlint*)",
+      "Bash(pnpm exec oxfmt*)",
+      "Bash(pnpm exec stylelint*)",
+      "Read",
+      "Edit",
+      "Write",
+      "Glob",
+      "Grep",
+      "WebFetch"
+    ],
+    "ask": [
+      "Bash(git commit*)",
+      "Bash(git push*)",
+      "Bash(git merge*)",
+      "Bash(git rebase*)",
+      "Bash(git reset*)",
+      "Bash(gh issue*)",
+      "Bash(gh pr*)",
+      "Bash(gh release*)",
+      "Bash(gh workflow*)",
+      "Bash(pnpm publish*)",
+      "Bash(pnpm nx release*)",
+      "Bash(npm publish*)"
+    ],
+    "deny": [
+      "Bash(git push --force*)",
+      "Bash(git push -f *)",
+      "Bash(git push * --force*)",
+      "Bash(rm -rf /*)",
+      "Bash(rm -rf ~)",
+      "Bash(rm -rf $HOME*)",
+      "Bash(cat .env*)",
+      "Bash(cat *.env)",
+      "Bash(cat *.env.local)",
+      "Bash(cat *.env.production)",
+      "Bash(printenv)",
+      "Bash(env)",
+      "Read(./.env)",
+      "Read(./.env.local)",
+      "Read(./.env.production)",
+      "Read(./.env.*)",
+      "Read(./**/.env)",
+      "Read(./**/.env.local)",
+      "Read(./**/.env.production)"
+    ]
+  }
+}

package/templates/client/_github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,19 @@
+<!-- Brief description of what this PR does and why. -->
+
+## Summary
+
+-
+-
+
+## Verification
+
+- [ ] `pnpm lint` passes
+- [ ] `pnpm format:check` passes
+- [ ] `pnpm style` passes
+- [ ] `pnpm typecheck` passes
+- [ ] `pnpm test` passes
+- [ ] `pnpm build` succeeds
+
+## Notes
+
+<!-- Anything reviewers should know. -->

package/templates/client/_github/dependabot.yml

@@ -0,0 +1,48 @@
+version: 2
+
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    groups:
+      raredays:
+        patterns:
+          - "@raredays/*"
+      react:
+        patterns:
+          - react
+          - react-dom
+          - "@types/react"
+          - "@types/react-dom"
+      next:
+        patterns:
+          - next
+      tailwind:
+        patterns:
+          - tailwindcss
+          - "@tailwindcss/*"
+      storybook:
+        patterns:
+          - storybook
+          - "@storybook/*"
+      vitest:
+        patterns:
+          - vitest
+          - "@vitejs/*"
+          - happy-dom
+      dev-tooling:
+        dependency-type: development
+        patterns:
+          - "*"
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 3
+    groups:
+      gha:
+        patterns:
+          - "*"