create-warlock 5.1.0 → 5.2.3

package/esm/helpers/warlock-versions.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"warlock-versions.mjs","names":[],"sources":["../../../../../../create-warlock/src/helpers/warlock-versions.ts"],"sourcesContent":["/**\n * Resolving the version to stamp onto the generated project's `@warlock.js/*`\n * dependencies.\n *\n * ## Why this file exists\n *\n * The scaffolder used to stamp its OWN version onto every sibling package\n * (`\"@warlock.js/core\": \"4.16.2\"`). That is only correct while the scaffolder's\n * version is published — and it usually is not: the release tooling bumps the\n * source version on every build, including `--no-publish` builds, so between\n * publishes the working tree carries a version that exists nowhere on the\n * registry. Every project scaffolded in that window pinned eight dependencies\n * to a version npm cannot resolve, and the install died with `ETARGET`.\n *\n * ## The rule\n *\n * Never write a dependency version we have not established exists. Resolution\n * order, per package:\n *\n *   1. the scaffolder's own version, IF the registry has it published — this\n *      preserves the lockstep guarantee the pin was introduced for;\n *   2. otherwise the registry's `latest` — the newest thing that actually\n *      exists, with a note explaining the substitution;\n *   3. otherwise (registry unreachable) a caret range floored to the major,\n *      e.g. `^4.0.0` — always satisfiable by any published 4.x, and the\n *      scaffold-time install writes a lockfile that freezes the result anyway.\n *\n * A package that resolves to nothing (404 — never published) is reported, not\n * papered over: it is the difference between \"your install failed\" and \"the\n * feature you asked for does not exist yet\".\n */\n\nimport { getJsonFile } from \"@warlock.js/fs\";\nimport { packageRoot, template } from \"./paths\";\n\nexport type VersionSource =\n  \"own-version\" | \"registry-latest\" | \"range-fallback\";\n\nexport type ResolvedVersion = {\n  package: string;\n  /** The exact version or range to write into the generated package.json. */\n  version: string;\n  source: VersionSource;\n};\n\nexport type VersionResolution = {\n  /** package name -> version/range to stamp. */\n  versions: Record<string, string>;\n  /** Human-readable notes worth showing before the install runs. */\n  notes: string[];\n  /** Packages the registry does not know about at all. */\n  unpublished: string[];\n  /** True when the registry could not be reached and ranges were guessed. */\n  offline: boolean;\n};\n\nconst REGISTRY_TIMEOUT_MS = 6_000;\n\n/**\n * Registry to query. `npm_config_registry` is set by npm/npx when the\n * scaffolder runs through them, so a private mirror is honoured for free.\n */\nfunction registryUrl(): string {\n  const registry =\n    process.env.npm_config_registry?.trim() || \"https://registry.npmjs.org\";\n\n  return registry.replace(/\\/+$/, \"\");\n}\n\n/** `4.16.2` -> `^4.0.0`; anything unparseable -> `latest`. */\nexport function fallbackRange(version: string): string {\n  const major = /^\\s*v?(\\d+)\\./.exec(version)?.[1];\n\n  return major ? `^${major}.0.0` : \"latest\";\n}\n\ntype Packument = {\n  \"dist-tags\"?: Record<string, string>;\n  versions?: Record<string, unknown>;\n};\n\n/**\n * Fetch the abbreviated packument for a package. Returns `undefined` when the\n * registry cannot be reached (network / timeout) and `null` when the registry\n * answers that the package does not exist.\n */\nasync function fetchPackument(\n  packageName: string,\n): Promise<Packument | null | undefined> {\n  const url = `${registryUrl()}/${packageName.replace(\"/\", \"%2F\")}`;\n\n  try {\n    const response = await fetch(url, {\n      headers: { accept: \"application/vnd.npm.install-v1+json\" },\n      signal: AbortSignal.timeout(REGISTRY_TIMEOUT_MS),\n    });\n\n    // 404 (public) and 401 (scoped package the registry hides) both mean the\n    // same thing to us: there is nothing here to install.\n    if (response.status === 404 || response.status === 401) return null;\n\n    if (!response.ok) return undefined;\n\n    return (await response.json()) as Packument;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Resolve one package against the registry. Pure aside from the fetch, so the\n * decision table above is readable in one place.\n */\nasync function resolvePackage(\n  packageName: string,\n  ownVersion: string,\n): Promise<ResolvedVersion & { published: boolean; reachable: boolean }> {\n  const packument = await fetchPackument(packageName);\n\n  if (packument === undefined) {\n    return {\n      package: packageName,\n      version: fallbackRange(ownVersion),\n      source: \"range-fallback\",\n      published: true,\n      reachable: false,\n    };\n  }\n\n  if (packument === null) {\n    return {\n      package: packageName,\n      version: fallbackRange(ownVersion),\n      source: \"range-fallback\",\n      published: false,\n      reachable: true,\n    };\n  }\n\n  if (packument.versions?.[ownVersion]) {\n    return {\n      package: packageName,\n      version: ownVersion,\n      source: \"own-version\",\n      published: true,\n      reachable: true,\n    };\n  }\n\n  const latest = packument[\"dist-tags\"]?.latest;\n\n  if (latest) {\n    return {\n      package: packageName,\n      version: latest,\n      source: \"registry-latest\",\n      published: true,\n      reachable: true,\n    };\n  }\n\n  return {\n    package: packageName,\n    version: fallbackRange(ownVersion),\n    source: \"range-fallback\",\n    published: true,\n    reachable: true,\n  };\n}\n\n/**\n * Every `@warlock.js/*` dependency the template declares. Read from the\n * template rather than the copied project so resolution can start before (or\n * in parallel with) the copy.\n */\nexport function templateWarlockDependencies(): string[] {\n  const templatePackageJson = getJsonFile(\n    `${template(\"warlock\")}/package.json`,\n  ) as {\n    dependencies?: Record<string, string>;\n    devDependencies?: Record<string, string>;\n  };\n\n  const names = new Set<string>();\n\n  for (const field of [\"dependencies\", \"devDependencies\"] as const) {\n    for (const name of Object.keys(templatePackageJson[field] ?? {})) {\n      if (name.startsWith(\"@warlock.js/\")) names.add(name);\n    }\n  }\n\n  return [...names];\n}\n\n/** The scaffolder's own published version, i.e. the lockstep candidate. */\nexport function scaffolderVersion(): string {\n  return (getJsonFile(packageRoot(\"package.json\")) as { version: string })\n    .version;\n}\n\nlet cached: Promise<VersionResolution> | undefined;\n\n/**\n * Resolve the versions to stamp, once per process.\n *\n * Never throws and never blocks a scaffold: the worst case is the caret\n * fallback plus a note saying so.\n */\nexport function resolveWarlockVersions(\n  packages: string[] = templateWarlockDependencies(),\n  ownVersion: string = scaffolderVersion(),\n): Promise<VersionResolution> {\n  if (cached) return cached;\n\n  cached = (async (): Promise<VersionResolution> => {\n    const resolutions = await Promise.all(\n      packages.map(name => resolvePackage(name, ownVersion)),\n    );\n\n    const versions: Record<string, string> = {};\n    const notes: string[] = [];\n    const unpublished: string[] = [];\n    const substituted: ResolvedVersion[] = [];\n\n    let offline = false;\n\n    for (const resolution of resolutions) {\n      versions[resolution.package] = resolution.version;\n\n      if (!resolution.reachable) offline = true;\n      if (!resolution.published) unpublished.push(resolution.package);\n      if (resolution.source === \"registry-latest\") substituted.push(resolution);\n    }\n\n    if (offline) {\n      notes.push(\n        `Could not reach the npm registry — pinning @warlock.js/* to ${fallbackRange(ownVersion)} instead of an exact version.`,\n      );\n    }\n\n    if (substituted.length > 0) {\n      const latest = substituted[0].version;\n\n      notes.push(\n        `create-warlock ${ownVersion} is not published yet — pinning @warlock.js/* to the latest published version (${latest}).`,\n      );\n    }\n\n    if (unpublished.length > 0) {\n      notes.push(\n        `Not published on the registry: ${unpublished.join(\", \")} — the install will fail until they are released.`,\n      );\n    }\n\n    return { versions, notes, unpublished, offline };\n  })();\n\n  return cached;\n}\n\n/** Test/CLI seam: forget the memoized resolution. */\nexport function resetWarlockVersionsCache() {\n  cached = undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDA,MAAM,sBAAsB;;;;;AAM5B,SAAS,cAAsB;CAI7B,QAFE,QAAQ,IAAI,qBAAqB,KAAK,KAAK,6BAE9B,CAAC,QAAQ,QAAQ,EAAE;AACpC;;AAGA,SAAgB,cAAc,SAAyB;CACrD,MAAM,QAAQ,gBAAgB,KAAK,OAAO,CAAC,GAAG;CAE9C,OAAO,QAAQ,IAAI,MAAM,QAAQ;AACnC;;;;;;AAYA,eAAe,eACb,aACuC;CACvC,MAAM,MAAM,GAAG,YAAY,EAAE,GAAG,YAAY,QAAQ,KAAK,KAAK;CAE9D,IAAI;EACF,MAAM,WAAW,MAAM,MAAM,KAAK;GAChC,SAAS,EAAE,QAAQ,sCAAsC;GACzD,QAAQ,YAAY,QAAQ,mBAAmB;EACjD,CAAC;EAID,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK,OAAO;EAE/D,IAAI,CAAC,SAAS,IAAI,OAAO;EAEzB,OAAQ,MAAM,SAAS,KAAK;CAC9B,QAAQ;EACN;CACF;AACF;;;;;AAMA,eAAe,eACb,aACA,YACuE;CACvE,MAAM,YAAY,MAAM,eAAe,WAAW;CAElD,IAAI,cAAc,QAChB,OAAO;EACL,SAAS;EACT,SAAS,cAAc,UAAU;EACjC,QAAQ;EACR,WAAW;EACX,WAAW;CACb;CAGF,IAAI,cAAc,MAChB,OAAO;EACL,SAAS;EACT,SAAS,cAAc,UAAU;EACjC,QAAQ;EACR,WAAW;EACX,WAAW;CACb;CAGF,IAAI,UAAU,WAAW,aACvB,OAAO;EACL,SAAS;EACT,SAAS;EACT,QAAQ;EACR,WAAW;EACX,WAAW;CACb;CAGF,MAAM,SAAS,UAAU,YAAY,EAAE;CAEvC,IAAI,QACF,OAAO;EACL,SAAS;EACT,SAAS;EACT,QAAQ;EACR,WAAW;EACX,WAAW;CACb;CAGF,OAAO;EACL,SAAS;EACT,SAAS,cAAc,UAAU;EACjC,QAAQ;EACR,WAAW;EACX,WAAW;CACb;AACF;;;;;;AAOA,SAAgB,8BAAwC;CACtD,MAAM,sBAAsB,YAC1B,GAAG,SAAS,SAAS,EAAE,cACzB;CAKA,MAAM,wBAAQ,IAAI,IAAY;CAE9B,KAAK,MAAM,SAAS,CAAC,gBAAgB,iBAAiB,GACpD,KAAK,MAAM,QAAQ,OAAO,KAAK,oBAAoB,UAAU,CAAC,CAAC,GAC7D,IAAI,KAAK,WAAW,cAAc,GAAG,MAAM,IAAI,IAAI;CAIvD,OAAO,CAAC,GAAG,KAAK;AAClB;;AAGA,SAAgB,oBAA4B;CAC1C,OAAQ,YAAY,YAAY,cAAc,CAAC,CAAC,CAC7C;AACL;AAEA,IAAI;;;;;;;AAQJ,SAAgB,uBACd,WAAqB,4BAA4B,GACjD,aAAqB,kBAAkB,GACX;CAC5B,IAAI,QAAQ,OAAO;CAEnB,UAAU,YAAwC;EAChD,MAAM,cAAc,MAAM,QAAQ,IAChC,SAAS,KAAI,SAAQ,eAAe,MAAM,UAAU,CAAC,CACvD;EAEA,MAAM,WAAmC,CAAC;EAC1C,MAAM,QAAkB,CAAC;EACzB,MAAM,cAAwB,CAAC;EAC/B,MAAM,cAAiC,CAAC;EAExC,IAAI,UAAU;EAEd,KAAK,MAAM,cAAc,aAAa;GACpC,SAAS,WAAW,WAAW,WAAW;GAE1C,IAAI,CAAC,WAAW,WAAW,UAAU;GACrC,IAAI,CAAC,WAAW,WAAW,YAAY,KAAK,WAAW,OAAO;GAC9D,IAAI,WAAW,WAAW,mBAAmB,YAAY,KAAK,UAAU;EAC1E;EAEA,IAAI,SACF,MAAM,KACJ,+DAA+D,cAAc,UAAU,EAAE,8BAC3F;EAGF,IAAI,YAAY,SAAS,GAAG;GAC1B,MAAM,SAAS,YAAY,EAAE,CAAC;GAE9B,MAAM,KACJ,kBAAkB,WAAW,iFAAiF,OAAO,GACvH;EACF;EAEA,IAAI,YAAY,SAAS,GACvB,MAAM,KACJ,kCAAkC,YAAY,KAAK,IAAI,EAAE,kDAC3D;EAGF,OAAO;GAAE;GAAU;GAAO;GAAa;EAAQ;CACjD,EAAC,CAAE;CAEH,OAAO;AACT"}
+{"version":3,"file":"warlock-versions.mjs","names":[],"sources":["../../../../../../create-warlock/src/helpers/warlock-versions.ts"],"sourcesContent":["/**\n * Resolving the version to stamp onto the generated project's `@warlock.js/*`\n * dependencies.\n *\n * ## Why this file exists\n *\n * The scaffolder used to stamp its OWN version onto every sibling package\n * (`\"@warlock.js/core\": \"4.16.2\"`). That is only correct while the scaffolder's\n * version is published — and it usually is not: the release tooling bumps the\n * source version on every build, including `--no-publish` builds, so between\n * publishes the working tree carries a version that exists nowhere on the\n * registry. Every project scaffolded in that window pinned eight dependencies\n * to a version npm cannot resolve, and the install died with `ETARGET`.\n *\n * ## The rule\n *\n * Never write a dependency version we have not established exists. Resolution\n * order, per package:\n *\n *   1. the scaffolder's own version, IF the registry has it published — this\n *      preserves the lockstep guarantee the pin was introduced for;\n *   2. otherwise the registry's `latest` — the newest thing that actually\n *      exists, with a note explaining the substitution;\n *   3. otherwise (registry unreachable) a caret range floored to the major,\n *      e.g. `^4.0.0` — always satisfiable by any published 4.x, and the\n *      scaffold-time install writes a lockfile that freezes the result anyway.\n *\n * A package that resolves to nothing (404 — never published) is reported, not\n * papered over: it is the difference between \"your install failed\" and \"the\n * feature you asked for does not exist yet\".\n */\n\nimport { getJsonFile } from \"@warlock.js/fs\";\nimport { packageRoot, template } from \"./paths\";\n\nexport type VersionSource =\n  \"own-version\" | \"registry-latest\" | \"range-fallback\";\n\nexport type ResolvedVersion = {\n  package: string;\n  /** The exact version or range to write into the generated package.json. */\n  version: string;\n  source: VersionSource;\n};\n\nexport type VersionResolution = {\n  /** package name -> version/range to stamp. */\n  versions: Record<string, string>;\n  /** Human-readable notes worth showing before the install runs. */\n  notes: string[];\n  /** Packages the registry does not know about at all. */\n  unpublished: string[];\n  /** True when the registry could not be reached and ranges were guessed. */\n  offline: boolean;\n};\n\nconst REGISTRY_TIMEOUT_MS = 6_000;\n\n/**\n * Registry to query. `npm_config_registry` is set by npm/npx when the\n * scaffolder runs through them, so a private mirror is honoured for free.\n */\nfunction registryUrl(): string {\n  const registry =\n    process.env.npm_config_registry?.trim() || \"https://registry.npmjs.org\";\n\n  return registry.replace(/\\/+$/, \"\");\n}\n\n/** `4.16.2` -> `^4.0.0`; anything unparseable -> `latest`. */\nexport function fallbackRange(version: string): string {\n  const major = /^\\s*v?(\\d+)\\./.exec(version)?.[1];\n\n  return major ? `^${major}.0.0` : \"latest\";\n}\n\ntype Packument = {\n  \"dist-tags\"?: Record<string, string>;\n  versions?: Record<string, unknown>;\n};\n\n/**\n * Fetch the abbreviated packument for a package. Returns `undefined` when the\n * registry cannot be reached (network / timeout) and `null` when the registry\n * answers that the package does not exist.\n */\nasync function fetchPackument(\n  packageName: string,\n): Promise<Packument | null | undefined> {\n  const url = `${registryUrl()}/${packageName.replace(\"/\", \"%2F\")}`;\n\n  try {\n    const response = await fetch(url, {\n      headers: { accept: \"application/vnd.npm.install-v1+json\" },\n      signal: AbortSignal.timeout(REGISTRY_TIMEOUT_MS),\n    });\n\n    // 404 (public) and 401 (scoped package the registry hides) both mean the\n    // same thing to us: there is nothing here to install.\n    if (response.status === 404 || response.status === 401) return null;\n\n    if (!response.ok) return undefined;\n\n    return (await response.json()) as Packument;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Resolve one package against the registry. Pure aside from the fetch, so the\n * decision table above is readable in one place.\n */\nasync function resolvePackage(\n  packageName: string,\n  ownVersion: string,\n): Promise<ResolvedVersion & { published: boolean; reachable: boolean }> {\n  const packument = await fetchPackument(packageName);\n\n  if (packument === undefined) {\n    return {\n      package: packageName,\n      version: fallbackRange(ownVersion),\n      source: \"range-fallback\",\n      published: true,\n      reachable: false,\n    };\n  }\n\n  if (packument === null) {\n    return {\n      package: packageName,\n      version: fallbackRange(ownVersion),\n      source: \"range-fallback\",\n      published: false,\n      reachable: true,\n    };\n  }\n\n  if (packument.versions?.[ownVersion]) {\n    return {\n      package: packageName,\n      version: ownVersion,\n      source: \"own-version\",\n      published: true,\n      reachable: true,\n    };\n  }\n\n  const latest = packument[\"dist-tags\"]?.latest;\n\n  if (latest) {\n    return {\n      package: packageName,\n      version: latest,\n      source: \"registry-latest\",\n      published: true,\n      reachable: true,\n    };\n  }\n\n  return {\n    package: packageName,\n    version: fallbackRange(ownVersion),\n    source: \"range-fallback\",\n    published: true,\n    reachable: true,\n  };\n}\n\n/**\n * Every `@warlock.js/*` dependency the template declares. Read from the\n * template rather than the copied project so resolution can start before (or\n * in parallel with) the copy.\n */\nexport function templateWarlockDependencies(): string[] {\n  const templatePackageJson = getJsonFile(\n    `${template(\"warlock\")}/package.json`,\n  ) as {\n    dependencies?: Record<string, string>;\n    devDependencies?: Record<string, string>;\n  };\n\n  const names = new Set<string>();\n\n  for (const field of [\"dependencies\", \"devDependencies\"] as const) {\n    for (const name of Object.keys(templatePackageJson[field] ?? {})) {\n      if (name.startsWith(\"@warlock.js/\")) names.add(name);\n    }\n  }\n\n  return [...names];\n}\n\n/** The scaffolder's own published version, i.e. the lockstep candidate. */\nexport function scaffolderVersion(): string {\n  return (getJsonFile(packageRoot(\"package.json\")) as { version: string })\n    .version;\n}\n\nlet cached: Promise<VersionResolution> | undefined;\n\n/**\n * Resolve the versions to stamp, once per process.\n *\n * Never throws and never blocks a scaffold: the worst case is the caret\n * fallback plus a note saying so.\n */\nexport function resolveWarlockVersions(\n  packages: string[] = templateWarlockDependencies(),\n  ownVersion: string = scaffolderVersion(),\n): Promise<VersionResolution> {\n  if (cached) return cached;\n\n  cached = (async (): Promise<VersionResolution> => {\n    const resolutions = await Promise.all(\n      packages.map(name => resolvePackage(name, ownVersion)),\n    );\n\n    const versions: Record<string, string> = {};\n    const notes: string[] = [];\n    const unpublished: string[] = [];\n    const substituted: ResolvedVersion[] = [];\n\n    let offline = false;\n\n    for (const resolution of resolutions) {\n      versions[resolution.package] = resolution.version;\n\n      if (!resolution.reachable) offline = true;\n      if (!resolution.published) unpublished.push(resolution.package);\n      if (resolution.source === \"registry-latest\") substituted.push(resolution);\n    }\n\n    if (offline) {\n      notes.push(\n        `Could not reach the npm registry — pinning @warlock.js/* to ${fallbackRange(ownVersion)} instead of an exact version.`,\n      );\n    }\n\n    if (substituted.length > 0) {\n      const latest = substituted[0].version;\n\n      notes.push(\n        `create-warlock ${ownVersion} is not published yet — pinning @warlock.js/* to the latest published version (${latest}).`,\n      );\n    }\n\n    if (unpublished.length > 0) {\n      notes.push(\n        `Not published on the registry: ${unpublished.join(\", \")} — the install will fail until they are released.`,\n      );\n    }\n\n    return { versions, notes, unpublished, offline };\n  })();\n\n  return cached;\n}\n\n/** Test/CLI seam: forget the memoized resolution. */\nexport function resetWarlockVersionsCache() {\n  cached = undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDA,MAAM,sBAAsB;;;;;AAM5B,SAAS,cAAsB;CAI7B,QAFE,QAAQ,IAAI,qBAAqB,KAAK,KAAK,8BAE7B,QAAQ,QAAQ,EAAE;AACpC;;AAGA,SAAgB,cAAc,SAAyB;CACrD,MAAM,QAAQ,gBAAgB,KAAK,OAAO,IAAI;CAE9C,OAAO,QAAQ,IAAI,MAAM,QAAQ;AACnC;;;;;;AAYA,eAAe,eACb,aACuC;CACvC,MAAM,MAAM,GAAG,YAAY,EAAE,GAAG,YAAY,QAAQ,KAAK,KAAK;CAE9D,IAAI;EACF,MAAM,WAAW,MAAM,MAAM,KAAK;GAChC,SAAS,EAAE,QAAQ,sCAAsC;GACzD,QAAQ,YAAY,QAAQ,mBAAmB;EACjD,CAAC;EAID,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK,OAAO;EAE/D,IAAI,CAAC,SAAS,IAAI,OAAO;EAEzB,OAAQ,MAAM,SAAS,KAAK;CAC9B,QAAQ;EACN;CACF;AACF;;;;;AAMA,eAAe,eACb,aACA,YACuE;CACvE,MAAM,YAAY,MAAM,eAAe,WAAW;CAElD,IAAI,cAAc,QAChB,OAAO;EACL,SAAS;EACT,SAAS,cAAc,UAAU;EACjC,QAAQ;EACR,WAAW;EACX,WAAW;CACb;CAGF,IAAI,cAAc,MAChB,OAAO;EACL,SAAS;EACT,SAAS,cAAc,UAAU;EACjC,QAAQ;EACR,WAAW;EACX,WAAW;CACb;CAGF,IAAI,UAAU,WAAW,aACvB,OAAO;EACL,SAAS;EACT,SAAS;EACT,QAAQ;EACR,WAAW;EACX,WAAW;CACb;CAGF,MAAM,SAAS,UAAU,cAAc;CAEvC,IAAI,QACF,OAAO;EACL,SAAS;EACT,SAAS;EACT,QAAQ;EACR,WAAW;EACX,WAAW;CACb;CAGF,OAAO;EACL,SAAS;EACT,SAAS,cAAc,UAAU;EACjC,QAAQ;EACR,WAAW;EACX,WAAW;CACb;AACF;;;;;;AAOA,SAAgB,8BAAwC;CACtD,MAAM,sBAAsB,YAC1B,GAAG,SAAS,SAAS,EAAE,cACzB;CAKA,MAAM,wBAAQ,IAAI,IAAY;CAE9B,KAAK,MAAM,SAAS,CAAC,gBAAgB,iBAAiB,GACpD,KAAK,MAAM,QAAQ,OAAO,KAAK,oBAAoB,UAAU,CAAC,CAAC,GAC7D,IAAI,KAAK,WAAW,cAAc,GAAG,MAAM,IAAI,IAAI;CAIvD,OAAO,CAAC,GAAG,KAAK;AAClB;;AAGA,SAAgB,oBAA4B;CAC1C,OAAQ,YAAY,YAAY,cAAc,CAAC,EAC5C;AACL;AAEA,IAAI;;;;;;;AAQJ,SAAgB,uBACd,WAAqB,4BAA4B,GACjD,aAAqB,kBAAkB,GACX;CAC5B,IAAI,QAAQ,OAAO;CAEnB,UAAU,YAAwC;EAChD,MAAM,cAAc,MAAM,QAAQ,IAChC,SAAS,KAAI,SAAQ,eAAe,MAAM,UAAU,CAAC,CACvD;EAEA,MAAM,WAAmC,CAAC;EAC1C,MAAM,QAAkB,CAAC;EACzB,MAAM,cAAwB,CAAC;EAC/B,MAAM,cAAiC,CAAC;EAExC,IAAI,UAAU;EAEd,KAAK,MAAM,cAAc,aAAa;GACpC,SAAS,WAAW,WAAW,WAAW;GAE1C,IAAI,CAAC,WAAW,WAAW,UAAU;GACrC,IAAI,CAAC,WAAW,WAAW,YAAY,KAAK,WAAW,OAAO;GAC9D,IAAI,WAAW,WAAW,mBAAmB,YAAY,KAAK,UAAU;EAC1E;EAEA,IAAI,SACF,MAAM,KACJ,+DAA+D,cAAc,UAAU,EAAE,8BAC3F;EAGF,IAAI,YAAY,SAAS,GAAG;GAC1B,MAAM,SAAS,YAAY,GAAG;GAE9B,MAAM,KACJ,kBAAkB,WAAW,iFAAiF,OAAO,GACvH;EACF;EAEA,IAAI,YAAY,SAAS,GACvB,MAAM,KACJ,kCAAkC,YAAY,KAAK,IAAI,EAAE,kDAC3D;EAGF,OAAO;GAAE;GAAU;GAAO;GAAa;EAAQ;CACjD,GAAG;CAEH,OAAO;AACT"}

package/esm/index.d.mts

@@ -8,7 +8,13 @@ import { CliFlags } from "./commands/create-new-app/types.mjs";
  * create-warlock my-app --db=postgres --features=test,herald --ai=openai,anthropic --yes
  */
 declare function parseFlags(argv: string[]): CliFlags;
+/**
+ * Read this package's own `version` field. A plain JSON read — no network
+ * call, no write, nothing else touched — so `--version` stays a pure,
+ * side-effect-free exit.
+ */
+declare function packageVersion(): string;
 declare function createApp(): void;
 //#endregion
-export { createApp as default, parseFlags };
+export { createApp as default, packageVersion, parseFlags };
 //# sourceMappingURL=index.d.mts.map

package/esm/index.mjs

@@ -1,5 +1,7 @@
 import { NO_DATABASE } from "./features/database-drivers.mjs";
+import { packageRoot } from "./helpers/paths.mjs";
 import createNewApp from "./commands/create-new-app/index.mjs";
+import { getJsonFile } from "@warlock.js/fs";
 
 //#region ../create-warlock/src/index.ts
 const valueFlags = [
@@ -9,6 +11,28 @@ const valueFlags = [
 	"features",
 	"ai"
 ];
+const HELP_TEXT = `
+  create-warlock — scaffold a new Warlock.js project
+
+  Usage
+    $ create-warlock [project-name] [options]
+
+  Options
+    --name              Project name (or pass it as the first positional arg)
+    --db=<driver>        Database driver (e.g. postgres, mongodb)
+    --no-db               Skip database selection entirely
+    --features=<list>    Comma-separated feature keys (e.g. test,herald)
+    --ai=<list>           Comma-separated AI provider keys (e.g. openai,anthropic)
+    --pm=<manager>        Package manager to use (npm, yarn, pnpm)
+    --git / --no-git      Force-enable or force-disable git initialization
+    --jwt / --no-jwt      Force-enable or force-disable JWT secret generation
+    -y, --yes             Skip prompts and accept defaults for anything unset
+    -h, --help            Show this help message and exit
+    -v, --version         Show the installed create-warlock version and exit
+
+  Example
+    $ create-warlock my-app --db=postgres --features=test,herald --yes
+`;
 /**
 * Parse the scaffolder's own CLI flags for non-interactive mode.
 *
@@ -35,6 +59,14 @@ function parseFlags(argv) {
 			}
 		}
 		switch (key) {
+			case "help":
+			case "h":
+				flags.help = true;
+				break;
+			case "version":
+			case "v":
+				flags.version = true;
+				break;
 			case "yes":
 			case "y":
 				flags.yes = true;
@@ -78,8 +110,26 @@ function splitList(value) {
 	if (!value) return [];
 	return value.split(",").map((item) => item.trim()).filter(Boolean);
 }
+/**
+* Read this package's own `version` field. A plain JSON read — no network
+* call, no write, nothing else touched — so `--version` stays a pure,
+* side-effect-free exit.
+*/
+function packageVersion() {
+	return getJsonFile(packageRoot("package.json")).version;
+}
 function createApp() {
 	const flags = parseFlags(process.argv.slice(2));
+	if (flags.help) {
+		console.log(HELP_TEXT);
+		process.exit(0);
+		return;
+	}
+	if (flags.version) {
+		console.log(packageVersion());
+		process.exit(0);
+		return;
+	}
 	Promise.resolve(createNewApp(flags)).catch((error) => {
 		console.error();
 		console.error(`  create-warlock failed: ${error?.message ?? String(error)}`);
@@ -89,5 +139,5 @@ function createApp() {
 }
 
 //#endregion
-export { createApp as default, parseFlags };
+export { createApp as default, packageVersion, parseFlags };
 //# sourceMappingURL=index.mjs.map

package/esm/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../create-warlock/src/index.ts"],"sourcesContent":["import createNewApp from \"./commands/create-new-app\";\nimport { CliFlags } from \"./commands/create-new-app/types\";\nimport { NO_DATABASE } from \"./features/database-drivers\";\n\nconst valueFlags = [\"name\", \"db\", \"pm\", \"features\", \"ai\"];\n\n/**\n * Parse the scaffolder's own CLI flags for non-interactive mode.\n *\n * @example\n * create-warlock my-app --db=postgres --features=test,herald --ai=openai,anthropic --yes\n */\nexport function parseFlags(argv: string[]): CliFlags {\n  const flags: CliFlags = {};\n  const positionals: string[] = [];\n\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n\n    if (!arg.startsWith(\"-\")) {\n      positionals.push(arg);\n      continue;\n    }\n\n    const equalIndex = arg.indexOf(\"=\");\n    const key = (equalIndex === -1 ? arg : arg.slice(0, equalIndex)).replace(/^-+/, \"\");\n    let value: string | undefined = equalIndex === -1 ? undefined : arg.slice(equalIndex + 1);\n\n    // Value-taking flags may use either `--key=value` or `--key value`.\n    if (valueFlags.includes(key) && value === undefined) {\n      const next = argv[i + 1];\n\n      if (next && !next.startsWith(\"-\")) {\n        value = next;\n        i++;\n      }\n    }\n\n    switch (key) {\n      case \"yes\":\n      case \"y\":\n        flags.yes = true;\n        break;\n      case \"git\":\n        flags.git = true;\n        break;\n      case \"no-git\":\n        flags.git = false;\n        break;\n      case \"jwt\":\n        flags.jwt = true;\n        break;\n      case \"no-jwt\":\n        flags.jwt = false;\n        break;\n      case \"name\":\n        flags.name = value;\n        break;\n      case \"db\":\n        flags.db = value;\n        break;\n      case \"no-db\":\n        // Opt out of a database entirely — equivalent to `--db=none`.\n        flags.db = NO_DATABASE;\n        break;\n      case \"pm\":\n        flags.pm = value;\n        break;\n      case \"features\":\n        flags.features = splitList(value);\n        break;\n      case \"ai\":\n        flags.ai = splitList(value);\n        break;\n    }\n  }\n\n  if (!flags.name && positionals.length > 0) {\n    flags.name = positionals[0];\n  }\n\n  return flags;\n}\n\nfunction splitList(value: string | undefined): string[] {\n  if (!value) return [];\n\n  return value\n    .split(\",\")\n    .map(item => item.trim())\n    .filter(Boolean);\n}\n\nexport default function createApp() {\n  const flags = parseFlags(process.argv.slice(2));\n\n  // An unexpected throw must surface as a readable error AND a non-zero exit\n  // code — never as a stack trace the user scrolls past on the way to a green\n  // banner (there is no banner after this point).\n  Promise.resolve(createNewApp(flags)).catch((error: unknown) => {\n    console.error();\n    console.error(\n      `  create-warlock failed: ${(error as Error)?.message ?? String(error)}`,\n    );\n    console.error();\n\n    process.exit(1);\n  });\n}\n"],"mappings":";;;;AAIA,MAAM,aAAa;CAAC;CAAQ;CAAM;CAAM;CAAY;AAAI;;;;;;;AAQxD,SAAgB,WAAW,MAA0B;CACnD,MAAM,QAAkB,CAAC;CACzB,MAAM,cAAwB,CAAC;CAE/B,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;EAEjB,IAAI,CAAC,IAAI,WAAW,GAAG,GAAG;GACxB,YAAY,KAAK,GAAG;GACpB;EACF;EAEA,MAAM,aAAa,IAAI,QAAQ,GAAG;EAClC,MAAM,OAAO,eAAe,KAAK,MAAM,IAAI,MAAM,GAAG,UAAU,EAAC,CAAE,QAAQ,OAAO,EAAE;EAClF,IAAI,QAA4B,eAAe,KAAK,SAAY,IAAI,MAAM,aAAa,CAAC;EAGxF,IAAI,WAAW,SAAS,GAAG,KAAK,UAAU,QAAW;GACnD,MAAM,OAAO,KAAK,IAAI;GAEtB,IAAI,QAAQ,CAAC,KAAK,WAAW,GAAG,GAAG;IACjC,QAAQ;IACR;GACF;EACF;EAEA,QAAQ,KAAR;GACE,KAAK;GACL,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,OAAO;IACb;GACF,KAAK;IACH,MAAM,KAAK;IACX;GACF,KAAK;IAEH,MAAM,KAAK;IACX;GACF,KAAK;IACH,MAAM,KAAK;IACX;GACF,KAAK;IACH,MAAM,WAAW,UAAU,KAAK;IAChC;GACF,KAAK;IACH,MAAM,KAAK,UAAU,KAAK;IAC1B;EACJ;CACF;CAEA,IAAI,CAAC,MAAM,QAAQ,YAAY,SAAS,GACtC,MAAM,OAAO,YAAY;CAG3B,OAAO;AACT;AAEA,SAAS,UAAU,OAAqC;CACtD,IAAI,CAAC,OAAO,OAAO,CAAC;CAEpB,OAAO,MACJ,MAAM,GAAG,CAAC,CACV,KAAI,SAAQ,KAAK,KAAK,CAAC,CAAC,CACxB,OAAO,OAAO;AACnB;AAEA,SAAwB,YAAY;CAClC,MAAM,QAAQ,WAAW,QAAQ,KAAK,MAAM,CAAC,CAAC;CAK9C,QAAQ,QAAQ,aAAa,KAAK,CAAC,CAAC,CAAC,OAAO,UAAmB;EAC7D,QAAQ,MAAM;EACd,QAAQ,MACN,4BAA6B,OAAiB,WAAW,OAAO,KAAK,GACvE;EACA,QAAQ,MAAM;EAEd,QAAQ,KAAK,CAAC;CAChB,CAAC;AACH"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../create-warlock/src/index.ts"],"sourcesContent":["import { getJsonFile } from \"@warlock.js/fs\";\nimport createNewApp from \"./commands/create-new-app\";\nimport { CliFlags } from \"./commands/create-new-app/types\";\nimport { NO_DATABASE } from \"./features/database-drivers\";\nimport { packageRoot } from \"./helpers/paths\";\n\nconst valueFlags = [\"name\", \"db\", \"pm\", \"features\", \"ai\"];\n\nconst HELP_TEXT = `\n  create-warlock — scaffold a new Warlock.js project\n\n  Usage\n    $ create-warlock [project-name] [options]\n\n  Options\n    --name              Project name (or pass it as the first positional arg)\n    --db=<driver>        Database driver (e.g. postgres, mongodb)\n    --no-db               Skip database selection entirely\n    --features=<list>    Comma-separated feature keys (e.g. test,herald)\n    --ai=<list>           Comma-separated AI provider keys (e.g. openai,anthropic)\n    --pm=<manager>        Package manager to use (npm, yarn, pnpm)\n    --git / --no-git      Force-enable or force-disable git initialization\n    --jwt / --no-jwt      Force-enable or force-disable JWT secret generation\n    -y, --yes             Skip prompts and accept defaults for anything unset\n    -h, --help            Show this help message and exit\n    -v, --version         Show the installed create-warlock version and exit\n\n  Example\n    $ create-warlock my-app --db=postgres --features=test,herald --yes\n`;\n\n/**\n * Parse the scaffolder's own CLI flags for non-interactive mode.\n *\n * @example\n * create-warlock my-app --db=postgres --features=test,herald --ai=openai,anthropic --yes\n */\nexport function parseFlags(argv: string[]): CliFlags {\n  const flags: CliFlags = {};\n  const positionals: string[] = [];\n\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n\n    if (!arg.startsWith(\"-\")) {\n      positionals.push(arg);\n      continue;\n    }\n\n    const equalIndex = arg.indexOf(\"=\");\n    const key = (equalIndex === -1 ? arg : arg.slice(0, equalIndex)).replace(/^-+/, \"\");\n    let value: string | undefined = equalIndex === -1 ? undefined : arg.slice(equalIndex + 1);\n\n    // Value-taking flags may use either `--key=value` or `--key value`.\n    if (valueFlags.includes(key) && value === undefined) {\n      const next = argv[i + 1];\n\n      if (next && !next.startsWith(\"-\")) {\n        value = next;\n        i++;\n      }\n    }\n\n    switch (key) {\n      case \"help\":\n      case \"h\":\n        flags.help = true;\n        break;\n      case \"version\":\n      case \"v\":\n        flags.version = true;\n        break;\n      case \"yes\":\n      case \"y\":\n        flags.yes = true;\n        break;\n      case \"git\":\n        flags.git = true;\n        break;\n      case \"no-git\":\n        flags.git = false;\n        break;\n      case \"jwt\":\n        flags.jwt = true;\n        break;\n      case \"no-jwt\":\n        flags.jwt = false;\n        break;\n      case \"name\":\n        flags.name = value;\n        break;\n      case \"db\":\n        flags.db = value;\n        break;\n      case \"no-db\":\n        // Opt out of a database entirely — equivalent to `--db=none`.\n        flags.db = NO_DATABASE;\n        break;\n      case \"pm\":\n        flags.pm = value;\n        break;\n      case \"features\":\n        flags.features = splitList(value);\n        break;\n      case \"ai\":\n        flags.ai = splitList(value);\n        break;\n    }\n  }\n\n  if (!flags.name && positionals.length > 0) {\n    flags.name = positionals[0];\n  }\n\n  return flags;\n}\n\nfunction splitList(value: string | undefined): string[] {\n  if (!value) return [];\n\n  return value\n    .split(\",\")\n    .map(item => item.trim())\n    .filter(Boolean);\n}\n\n/**\n * Read this package's own `version` field. A plain JSON read — no network\n * call, no write, nothing else touched — so `--version` stays a pure,\n * side-effect-free exit.\n */\nexport function packageVersion(): string {\n  return (getJsonFile(packageRoot(\"package.json\")) as { version: string })\n    .version;\n}\n\nexport default function createApp() {\n  const flags = parseFlags(process.argv.slice(2));\n\n  // `--help` and `--version` must exit before anything that touches the\n  // filesystem, the network, or a prompt — they win over every other flag,\n  // including a positional project name.\n  if (flags.help) {\n    console.log(HELP_TEXT);\n    process.exit(0);\n    return;\n  }\n\n  if (flags.version) {\n    console.log(packageVersion());\n    process.exit(0);\n    return;\n  }\n\n  // An unexpected throw must surface as a readable error AND a non-zero exit\n  // code — never as a stack trace the user scrolls past on the way to a green\n  // banner (there is no banner after this point).\n  Promise.resolve(createNewApp(flags)).catch((error: unknown) => {\n    console.error();\n    console.error(\n      `  create-warlock failed: ${(error as Error)?.message ?? String(error)}`,\n    );\n    console.error();\n\n    process.exit(1);\n  });\n}\n"],"mappings":";;;;;;AAMA,MAAM,aAAa;CAAC;CAAQ;CAAM;CAAM;CAAY;AAAI;AAExD,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BlB,SAAgB,WAAW,MAA0B;CACnD,MAAM,QAAkB,CAAC;CACzB,MAAM,cAAwB,CAAC;CAE/B,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;EAEjB,IAAI,CAAC,IAAI,WAAW,GAAG,GAAG;GACxB,YAAY,KAAK,GAAG;GACpB;EACF;EAEA,MAAM,aAAa,IAAI,QAAQ,GAAG;EAClC,MAAM,OAAO,eAAe,KAAK,MAAM,IAAI,MAAM,GAAG,UAAU,GAAG,QAAQ,OAAO,EAAE;EAClF,IAAI,QAA4B,eAAe,KAAK,SAAY,IAAI,MAAM,aAAa,CAAC;EAGxF,IAAI,WAAW,SAAS,GAAG,KAAK,UAAU,QAAW;GACnD,MAAM,OAAO,KAAK,IAAI;GAEtB,IAAI,QAAQ,CAAC,KAAK,WAAW,GAAG,GAAG;IACjC,QAAQ;IACR;GACF;EACF;EAEA,QAAQ,KAAR;GACE,KAAK;GACL,KAAK;IACH,MAAM,OAAO;IACb;GACF,KAAK;GACL,KAAK;IACH,MAAM,UAAU;IAChB;GACF,KAAK;GACL,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,MAAM;IACZ;GACF,KAAK;IACH,MAAM,OAAO;IACb;GACF,KAAK;IACH,MAAM,KAAK;IACX;GACF,KAAK;IAEH,MAAM,KAAK;IACX;GACF,KAAK;IACH,MAAM,KAAK;IACX;GACF,KAAK;IACH,MAAM,WAAW,UAAU,KAAK;IAChC;GACF,KAAK;IACH,MAAM,KAAK,UAAU,KAAK;IAC1B;EACJ;CACF;CAEA,IAAI,CAAC,MAAM,QAAQ,YAAY,SAAS,GACtC,MAAM,OAAO,YAAY;CAG3B,OAAO;AACT;AAEA,SAAS,UAAU,OAAqC;CACtD,IAAI,CAAC,OAAO,OAAO,CAAC;CAEpB,OAAO,MACJ,MAAM,GAAG,EACT,KAAI,SAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,OAAO;AACnB;;;;;;AAOA,SAAgB,iBAAyB;CACvC,OAAQ,YAAY,YAAY,cAAc,CAAC,EAC5C;AACL;AAEA,SAAwB,YAAY;CAClC,MAAM,QAAQ,WAAW,QAAQ,KAAK,MAAM,CAAC,CAAC;CAK9C,IAAI,MAAM,MAAM;EACd,QAAQ,IAAI,SAAS;EACrB,QAAQ,KAAK,CAAC;EACd;CACF;CAEA,IAAI,MAAM,SAAS;EACjB,QAAQ,IAAI,eAAe,CAAC;EAC5B,QAAQ,KAAK,CAAC;EACd;CACF;CAKA,QAAQ,QAAQ,aAAa,KAAK,CAAC,EAAE,OAAO,UAAmB;EAC7D,QAAQ,MAAM;EACd,QAAQ,MACN,4BAA6B,OAAiB,WAAW,OAAO,KAAK,GACvE;EACA,QAAQ,MAAM;EAEd,QAAQ,KAAK,CAAC;CAChB,CAAC;AACH"}

package/llms-full.txt

@@ -61,6 +61,8 @@ Pass `--yes` (or `-y`) to skip every prompt and build from flags with defaults.
 
 Value flags accept either `--db=postgres` or `--db postgres`. Unknown `--features` / `--ai` keys fail fast before any install.
 
+`--help`/`-h` and `--version`/`-v` short-circuit before anything else — no prompt, filesystem write, or network call, and `--help` wins even over a positional project name. `--version` prints the installed `create-warlock` version.
+
 ## Valid keys
 
 **Database drivers** (`--db`):
@@ -72,7 +74,7 @@ Value flags accept either `--db=postgres` or `--db postgres`. Unknown `--feature
 | `mysql`    | 3306         | coming soon (disabled in the wizard) |
 | `none`     | —            | opt out — no driver, no driver package, `src/config/database.ts` removed |
 
-**Features** (`--features`): `react`, `react-email`, `mail`, `ses`, `image`, `s3`, `redis`, `scheduler`, `herald`, `socket`, `swagger`, `postman`, `test`.
+**Features** (`--features`): `react`, `react-email`, `mail`, `ses`, `image`, `s3`, `redis`, `scheduler`, `herald`, `socket`, `test`, `access`, `web`, `tailwind`, `shadcn`, `notifications`.
 
 **AI providers / packages** (`--ai`): `ai-openai`, `ai-google`, `ai-anthropic`, `ai-bedrock`, `ai-ollama`, plus the capability packages `ai-tools`, `ai-panoptic`, `ai-workspace`. Any pick auto-pulls the core `@warlock.js/ai` package.
 

package/package.json

@@ -12,13 +12,13 @@
   "dependencies": {
     "@clack/prompts": "^0.7.0",
     "@mongez/copper": "^2.1.2",
-    "@warlock.js/fs": "5.1.0",
+    "@warlock.js/fs": "5.2.3",
     "@mongez/reinforcements": "^4.0.1",
     "cross-spawn": "^7.0.3",
     "rimraf": "^6.0.1",
     "which-pm-runs": "^1.1.0"
   },
-  "version": "5.1.0",
+  "version": "5.2.3",
   "type": "module",
   "main": "./esm/index.mjs",
   "module": "./esm/index.mjs",

package/skills/create-a-warlock-project/SKILL.md

@@ -11,7 +11,7 @@ description: 'Scaffold a brand-new Warlock.js project with `create-warlock` —
 
 ```bash
 # Interactive wizard (recommended for humans)
-yarn create warlock
+pnpm create warlock
 # or: npm create warlock@latest / pnpm create warlock / npx create-warlock
 
 # Non-interactive (CI, agents, reproducible setups) — one command scaffolds the whole app
@@ -53,6 +53,8 @@ Pass `--yes` (or `-y`) to skip every prompt and build from flags with defaults.
 
 Value flags accept either `--db=postgres` or `--db postgres`. Unknown `--features` / `--ai` keys fail fast before any install.
 
+`--help`/`-h` and `--version`/`-v` short-circuit before anything else — no prompt, filesystem write, or network call, and `--help` wins even over a positional project name. `--version` prints the installed `create-warlock` version.
+
 ## Valid keys
 
 **Database drivers** (`--db`):
@@ -64,7 +66,7 @@ Value flags accept either `--db=postgres` or `--db postgres`. Unknown `--feature
 | `mysql`    | 3306         | coming soon (disabled in the wizard) |
 | `none`     | —            | opt out — no driver, no driver package, `src/config/database.ts` removed |
 
-**Features** (`--features`): `react`, `react-email`, `mail`, `ses`, `image`, `s3`, `redis`, `scheduler`, `herald`, `socket`, `swagger`, `postman`, `test`.
+**Features** (`--features`): `react`, `react-email`, `mail`, `ses`, `image`, `s3`, `redis`, `scheduler`, `herald`, `socket`, `test`, `access`, `web`, `tailwind`, `shadcn`, `notifications`.
 
 **AI providers / packages** (`--ai`): `ai-openai`, `ai-google`, `ai-anthropic`, `ai-bedrock`, `ai-ollama`, plus the capability packages `ai-tools`, `ai-panoptic`, `ai-workspace`. Any pick auto-pulls the core `@warlock.js/ai` package.