generatesaas 0.17.0 → 0.17.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/index.js +125 -91
  2. package/package.json +1 -1
package/dist/index.js CHANGED
@@ -1,26 +1,45 @@
1
1
  #!/usr/bin/env node
2
- import{Command as Pi}from"commander";import*as wr from"@clack/prompts";import{existsSync as ur,readdirSync as ri,rmSync as ni,readFileSync as ii,writeFileSync as oi}from"fs";import{join as fr,resolve as si}from"path";import{Option as W}from"commander";import*as _ from"@clack/prompts";import*as Ne from"@clack/prompts";import at from"picocolors";function It(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";Ne.intro(at.bgYellow(at.black(t)))}function At(){Ne.outro(at.yellow("Happy building!"))}import*as m from"@clack/prompts";import f from"picocolors";var Pe={nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"},nextjs:{label:"Next.js",hint:"coming soon"}},je={fullstack:{label:"Fullstack",hint:"Nuxt handles API via server routes"},separate:{label:"Separate",hint:"Standalone Hono backend"}},$e={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},Ue={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},Ve={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},ye={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},Re={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var ne={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var K={node:{label:"Node.js / Docker",hint:"self-hosted with Dockerfile",edgeRuntime:!1},cloudflare:{label:"Cloudflare Workers",hint:"edge runtime, wrangler.toml",edgeRuntime:!0},vercel:{label:"Vercel",hint:"serverless, vercel.json",edgeRuntime:!0}},B={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},G={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},ke=[{target:"cloudflare",provider:"postgres",reason:"Cloudflare Workers cannot connect to self-hosted PostgreSQL. Use Neon instead."},{target:"cloudflare",provider:"supabase",reason:"Supabase driver uses TCP sockets which are unavailable on Cloudflare Workers. Use Neon instead."},{target:"cloudflare",provider:"redis",reason:"Cloudflare Workers cannot connect to self-hosted Redis. Use Upstash instead."},{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."}],Me=[{architecture:"fullstack",target:"cloudflare",reason:"Nuxt fullstack on Cloudflare hit 3MB worker size limits, OOM at build, and unenv polyfill bugs. Use Vercel or Node for fullstack, or switch to separate architecture for Cloudflare."}],wt=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];var ie={google:{label:"Google",envVars:[{name:"GOOGLE_CLIENT_ID",secret:!1},{name:"GOOGLE_CLIENT_SECRET",secret:!0}]},github:{label:"GitHub",envVars:[{name:"GITHUB_CLIENT_ID",secret:!1},{name:"GITHUB_CLIENT_SECRET",secret:!0}]},facebook:{label:"Facebook",envVars:[{name:"FACEBOOK_CLIENT_ID",secret:!1},{name:"FACEBOOK_CLIENT_SECRET",secret:!0}]},discord:{label:"Discord",envVars:[{name:"DISCORD_CLIENT_ID",secret:!1},{name:"DISCORD_CLIENT_SECRET",secret:!0}]},x:{label:"X",envVars:[{name:"TWITTER_CLIENT_ID",secret:!1},{name:"TWITTER_CLIENT_SECRET",secret:!0}]}};var Fe=["fullstack","separate"],ze=["stripe","polar","none"],Ke=["smtp","ses","resend"],Be=["postgres","redis","inngest","mailpit"],Ge=["claude-code","cursor","codex","gemini-cli","windsurf"],He=["user","organization"],oe=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],se=["node","cloudflare","vercel"],ae=["postgres","neon","supabase"],ce=["redis","upstash"],qe=["google","github","facebook","discord","x"];function Ye(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function We(e){return/^[a-z][a-z0-9-]*$/.test(e)}function I(e){return e instanceof Error?e.message:String(e)}function T(e){m.isCancel(e)&&(m.cancel("Setup cancelled."),process.exit(0))}function ct(e){let t=[];e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0}));for(let r of e.socialProviders){let i=ie[r];for(let n of i.envVars)t.push({key:n.name,message:`${n.name} (${i.label}, optional):`,secret:n.secret})}return e.demo&&t.push({key:"TURNSTILE_SECRET_KEY",message:"Cloudflare Turnstile secret key (optional):",secret:!0}),t}async function bt(e){let t=!1;m.log.info(f.bold("Project"));let r=e?.projectName??await(async()=>{t=!0;let c=await m.text({message:"Project name:",placeholder:"my-saas",validate:l=>{if(!l?.trim())return"Project name is required.";if(!We(l))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return T(c),c})(),i=e?.appName??await(async()=>{t=!0;let c=await m.text({message:"App name:",initialValue:Ye(r),validate:l=>{if(!l?.trim())return"App name is required."}});return T(c),c})(),n=e?.projectDir??await(async()=>{t=!0;let c=await m.text({message:"Project location:",initialValue:`./${r}`});return T(c),c==="."?process.cwd():c})();e?.frontend===void 0&&m.log.info("Next.js support is coming soon.");let o=e?.frontend??await(async()=>{t=!0;let c=Object.keys(Pe).filter(u=>u!=="nextjs"),l=await m.select({message:"Frontend framework:",options:c.map(u=>({value:u,label:Pe[u].label,hint:Pe[u].hint}))});return T(l),l})();m.log.info(f.bold("Infrastructure"));let s=e?.architecture??await(async()=>{t=!0;let c=await m.select({message:"Architecture:",options:Fe.map(l=>({value:l,label:je[l].label,hint:je[l].hint}))});return T(c),c})(),a=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){t=!0;let c=se.filter(u=>!Me.some(A=>A.architecture===s&&A.target===u)),l=await m.select({message:"Deployment target:",options:c.map(u=>({value:u,label:K[u].label,hint:K[u].hint}))});T(l),a=l}let p=e?.databaseProvider??await(async()=>{t=!0;let c=ae.filter(u=>!ke.some(A=>A.target===a&&A.provider===u));if(c.length===1){let u=c[0];return m.log.info(`Auto-selected ${B[u].label} (only compatible option for ${K[a].label}).`),u}let l=await m.select({message:"Database provider:",options:c.map(u=>({value:u,label:B[u].label,hint:B[u].hint}))});return T(l),l})(),S=e?.cacheProvider??await(async()=>{t=!0;let c=ce.filter(u=>!ke.some(A=>A.target===a&&A.provider===u));if(c.length===1){let u=c[0];return m.log.info(`Auto-selected ${G[u].label} (only compatible option for ${K[a].label}).`),u}let l=await m.select({message:"Cache provider:",options:c.map(u=>({value:u,label:G[u].label,hint:G[u].hint}))});return T(l),l})();if(K[a]?.edgeRuntime){let c=wt.map(l=>` - ${l}`).join(`
3
- `);m.note(c,"Unavailable on edge runtime")}m.log.info(f.bold("Features"));let h=e?.paymentProvider??await(async()=>{t=!0;let c=await m.select({message:"Payment provider:",options:ze.map(l=>({value:l,label:$e[l].label,hint:$e[l].hint}))});return T(c),c})(),g=e?.defaultCurrency??await(async()=>{if(h==="none")return"USD";t=!0;let c=await m.select({message:"Default currency:",options:oe.map(l=>({value:l,label:l,hint:ne[l].name}))});return T(c),c})(),E=e?.emailProvider??await(async()=>{t=!0;let c=await m.select({message:"Email provider:",options:Ke.map(l=>({value:l,label:Ue[l].label,hint:Ue[l].hint}))});return T(c),c})(),v=e?.multiTenancy??await(async()=>{t=!0;let c=await m.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return T(c),c})(),D=e?.billingScope??"user";if(v&&e?.billingScope===void 0){t=!0;let c=await m.select({message:"Billing scope:",options:He.map(l=>({value:l,label:Ve[l].label,hint:Ve[l].hint}))});T(c),D=c}let ue=e?.blog??await(async()=>{t=!0;let c=await m.confirm({message:"Enable blog?",initialValue:!0});return T(c),c})(),te=e?.revenueSharing??await(async()=>{t=!0;let c=await m.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return T(c),c})(),b=h==="none"?!1:e?.credits??await(async()=>{t=!0;let c=await m.confirm({message:"Enable credits? (metered usage on top of subscription plans)",initialValue:!0});return T(c),c})(),J=e?.socialProviders??await(async()=>{t=!0;let c=qe.map(u=>({value:u,label:ie[u].label,hint:`requires ${ie[u].envVars.map(A=>A.name).join(" / ")}`})),l=await m.multiselect({message:"Which social login providers should the sign-in screen show?",options:c,initialValues:[],required:!1});return T(l),l})();m.log.info(f.bold("Tooling"));let y=e?.dockerServices??await(async()=>{t=!0;let c=[...Be].filter(k=>k!=="mailpit");E==="smtp"&&c.push("mailpit");let l=c.map(k=>({value:k,label:ye[k].label,hint:ye[k].hint})),u=l.map(k=>k.value).filter(k=>!(k==="postgres"&&(p==="neon"||p==="supabase")||k==="redis"&&S==="upstash")),A=await m.multiselect({message:"Which services should we set up in Docker for you?",options:l,initialValues:u,required:!1});return T(A),A})(),P=e?.aiTools??await(async()=>{t=!0;let c=Ge.map(u=>({value:u,label:Re[u].label})),l=await m.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return T(l),l})(),fe=e?.demo,ge=ct({databaseProvider:p,cacheProvider:S,paymentProvider:h,emailProvider:E,socialProviders:J,demo:fe}),be={};if(ge.length>0&&t){m.log.info(f.bold("Credentials")+f.dim(" all optional \u2014 press Enter to skip, fill in .env later"));for(let c of ge)if(t=!0,c.secret){let l=await m.password({message:c.message,mask:"*"});T(l),typeof l=="string"&&l.trim()&&(be[c.key]=l.trim())}else{let l=await m.text({message:c.message,placeholder:c.placeholder});T(l),typeof l=="string"&&l.trim()&&(be[c.key]=l.trim())}}if(t){let c=[` Name: ${f.cyan(r)}`,` App name: ${f.cyan(i)}`,` Location: ${f.cyan(n)}`,` Frontend: ${f.cyan(Pe[o].label)}`,` Architecture: ${f.cyan(je[s].label)}`].join(`
4
- `),l=[` Deploy target: ${f.cyan(K[a]?.label??"Node.js / Docker")}`,` Database: ${f.cyan(B[p].label)}`,` Cache: ${f.cyan(G[S].label)}`,y.length>0?` Docker: ${f.cyan(y.map(re=>ye[re].label).join(", "))}`:` Docker: ${f.dim("none")}`].filter(Boolean).join(`
5
- `),u=[h!=="none"?` Payment: ${f.cyan($e[h].label)} (${g})`:` Payment: ${f.dim("none")}`,` Credits: ${b?f.cyan("Yes"):f.dim("No")}`,` Email: ${f.cyan(Ue[E].label)}`,` Multi-tenancy: ${v?f.cyan("Yes")+` (billing: ${Ve[D].label})`:f.dim("No")}`,` Blog: ${ue?f.cyan("Yes"):f.dim("No")}`,` Rev. sharing: ${te?f.cyan("Yes"):f.dim("No")}`,J.length>0?` Social login: ${f.cyan(J.map(re=>ie[re].label).join(", "))}`:` Social login: ${f.dim("none")}`,P.length>0?` AI tools: ${f.cyan(P.map(re=>Re[re].label).join(", "))}`:` AI tools: ${f.dim("none")}`].join(`
6
- `),A=[f.bold("Project"),c,"",f.bold("Infrastructure"),l,"",f.bold("Features"),u];if(ge.length>0){let re=ge.map(Tt=>{let br=be[Tt.key]?f.green("provided"):f.dim("skipped");return` ${Tt.key}: ${br}`}).join(`
2
+ import{Command as Ri}from"commander";import*as wr from"@clack/prompts";import{existsSync as ur,readdirSync as ni,rmSync as ii,readFileSync as oi,writeFileSync as si}from"fs";import{join as fr,resolve as ai}from"path";import{Option as W}from"commander";import*as I from"@clack/prompts";import*as $e from"@clack/prompts";import at from"picocolors";function _t(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";$e.intro(at.bgYellow(at.black(t)))}function At(){$e.outro(at.yellow("Happy building!"))}import*as m from"@clack/prompts";import f from"picocolors";var Pe={nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"},nextjs:{label:"Next.js",hint:"coming soon"}},Ue={fullstack:{label:"Fullstack",hint:"Nuxt handles API via server routes"},separate:{label:"Separate",hint:"Standalone Hono backend"}},Ve={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},Me={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},Fe={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},he={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},Re={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var ne={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var B={node:{label:"Node.js / Docker",hint:"self-hosted with Dockerfile",edgeRuntime:!1},cloudflare:{label:"Cloudflare Workers",hint:"edge runtime, wrangler.toml",edgeRuntime:!0},vercel:{label:"Vercel",hint:"serverless, vercel.json",edgeRuntime:!0}},K={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},G={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},ke=[{target:"cloudflare",provider:"postgres",reason:"Cloudflare Workers cannot connect to self-hosted PostgreSQL. Use Neon instead."},{target:"cloudflare",provider:"supabase",reason:"Supabase driver uses TCP sockets which are unavailable on Cloudflare Workers. Use Neon instead."},{target:"cloudflare",provider:"redis",reason:"Cloudflare Workers cannot connect to self-hosted Redis. Use Upstash instead."},{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."}],ze=[{architecture:"fullstack",target:"cloudflare",reason:"Nuxt fullstack on Cloudflare hit 3MB worker size limits, OOM at build, and unenv polyfill bugs. Use Vercel or Node for fullstack, or switch to separate architecture for Cloudflare."}],wt=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];var ie={google:{label:"Google",envVars:[{name:"GOOGLE_CLIENT_ID",secret:!1},{name:"GOOGLE_CLIENT_SECRET",secret:!0}]},github:{label:"GitHub",envVars:[{name:"GITHUB_CLIENT_ID",secret:!1},{name:"GITHUB_CLIENT_SECRET",secret:!0}]},facebook:{label:"Facebook",envVars:[{name:"FACEBOOK_CLIENT_ID",secret:!1},{name:"FACEBOOK_CLIENT_SECRET",secret:!0}]},discord:{label:"Discord",envVars:[{name:"DISCORD_CLIENT_ID",secret:!1},{name:"DISCORD_CLIENT_SECRET",secret:!0}]},x:{label:"X",envVars:[{name:"TWITTER_CLIENT_ID",secret:!1},{name:"TWITTER_CLIENT_SECRET",secret:!0}]}};var Be=["fullstack","separate"],Ke=["stripe","polar","none"],Ge=["smtp","ses","resend"],He=["postgres","redis","inngest","mailpit"],qe=["claude-code","cursor","codex","gemini-cli","windsurf"],Ye=["user","organization"],oe=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],se=["node","cloudflare","vercel"],ae=["postgres","neon","supabase"],ce=["redis","upstash"],We=["google","github","facebook","discord","x"];function Je(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function Xe(e){return/^[a-z][a-z0-9-]*$/.test(e)}function _(e){return e instanceof Error?e.message:String(e)}function T(e){m.isCancel(e)&&(m.cancel("Setup cancelled."),process.exit(0))}function ct(e){let t=[];e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0}));for(let r of e.socialProviders){let i=ie[r];for(let n of i.envVars)t.push({key:n.name,message:`${n.name} (${i.label}, optional):`,secret:n.secret})}return e.demo&&t.push({key:"TURNSTILE_SECRET_KEY",message:"Cloudflare Turnstile secret key (optional):",secret:!0}),t}async function bt(e){let t=!1;m.log.info(f.bold("Project"));let r=e?.projectName??await(async()=>{t=!0;let c=await m.text({message:"Project name:",placeholder:"my-saas",validate:l=>{if(!l?.trim())return"Project name is required.";if(!Xe(l))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return T(c),c})(),i=e?.appName??await(async()=>{t=!0;let c=await m.text({message:"App name:",initialValue:Je(r),validate:l=>{if(!l?.trim())return"App name is required."}});return T(c),c})(),n=e?.projectDir??await(async()=>{t=!0;let c=await m.text({message:"Project location:",initialValue:`./${r}`});return T(c),c==="."?process.cwd():c})();e?.frontend===void 0&&m.log.info("Next.js support is coming soon.");let o=e?.frontend??await(async()=>{t=!0;let c=Object.keys(Pe).filter(u=>u!=="nextjs"),l=await m.select({message:"Frontend framework:",options:c.map(u=>({value:u,label:Pe[u].label,hint:Pe[u].hint}))});return T(l),l})();m.log.info(f.bold("Infrastructure"));let s=e?.architecture??await(async()=>{t=!0;let c=await m.select({message:"Architecture:",options:Be.map(l=>({value:l,label:Ue[l].label,hint:Ue[l].hint}))});return T(c),c})(),a=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){t=!0;let c=se.filter(u=>!ze.some(A=>A.architecture===s&&A.target===u)),l=await m.select({message:"Deployment target:",options:c.map(u=>({value:u,label:B[u].label,hint:B[u].hint}))});T(l),a=l}let p=e?.databaseProvider??await(async()=>{t=!0;let c=ae.filter(u=>!ke.some(A=>A.target===a&&A.provider===u));if(c.length===1){let u=c[0];return m.log.info(`Auto-selected ${K[u].label} (only compatible option for ${B[a].label}).`),u}let l=await m.select({message:"Database provider:",options:c.map(u=>({value:u,label:K[u].label,hint:K[u].hint}))});return T(l),l})(),S=e?.cacheProvider??await(async()=>{t=!0;let c=ce.filter(u=>!ke.some(A=>A.target===a&&A.provider===u));if(c.length===1){let u=c[0];return m.log.info(`Auto-selected ${G[u].label} (only compatible option for ${B[a].label}).`),u}let l=await m.select({message:"Cache provider:",options:c.map(u=>({value:u,label:G[u].label,hint:G[u].hint}))});return T(l),l})();if(B[a]?.edgeRuntime){let c=wt.map(l=>` - ${l}`).join(`
3
+ `);m.note(c,"Unavailable on edge runtime")}m.log.info(f.bold("Features"));let h=e?.paymentProvider??await(async()=>{t=!0;let c=await m.select({message:"Payment provider:",options:Ke.map(l=>({value:l,label:Ve[l].label,hint:Ve[l].hint}))});return T(c),c})(),g=e?.defaultCurrency??await(async()=>{if(h==="none")return"USD";t=!0;let c=await m.select({message:"Default currency:",options:oe.map(l=>({value:l,label:l,hint:ne[l].name}))});return T(c),c})(),E=e?.emailProvider??await(async()=>{t=!0;let c=await m.select({message:"Email provider:",options:Ge.map(l=>({value:l,label:Me[l].label,hint:Me[l].hint}))});return T(c),c})(),v=e?.multiTenancy??await(async()=>{t=!0;let c=await m.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return T(c),c})(),D=e?.billingScope??"user";if(v&&e?.billingScope===void 0){t=!0;let c=await m.select({message:"Billing scope:",options:Ye.map(l=>({value:l,label:Fe[l].label,hint:Fe[l].hint}))});T(c),D=c}let fe=e?.blog??await(async()=>{t=!0;let c=await m.confirm({message:"Enable blog?",initialValue:!0});return T(c),c})(),te=e?.revenueSharing??await(async()=>{t=!0;let c=await m.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return T(c),c})(),b=h==="none"?!1:e?.credits??await(async()=>{t=!0;let c=await m.confirm({message:"Enable credits? (metered usage on top of subscription plans)",initialValue:!0});return T(c),c})(),J=e?.socialProviders??await(async()=>{t=!0;let c=We.map(u=>({value:u,label:ie[u].label,hint:`requires ${ie[u].envVars.map(A=>A.name).join(" / ")}`})),l=await m.multiselect({message:"Which social login providers should the sign-in screen show?",options:c,initialValues:[],required:!1});return T(l),l})();m.log.info(f.bold("Tooling"));let y=e?.dockerServices??await(async()=>{t=!0;let c=[...He].filter(k=>k!=="mailpit");E==="smtp"&&c.push("mailpit");let l=c.map(k=>({value:k,label:he[k].label,hint:he[k].hint})),u=l.map(k=>k.value).filter(k=>!(k==="postgres"&&(p==="neon"||p==="supabase")||k==="redis"&&S==="upstash")),A=await m.multiselect({message:"Which services should we set up in Docker for you?",options:l,initialValues:u,required:!1});return T(A),A})(),P=e?.aiTools??await(async()=>{t=!0;let c=qe.map(u=>({value:u,label:Re[u].label})),l=await m.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return T(l),l})(),ge=e?.demo,ye=ct({databaseProvider:p,cacheProvider:S,paymentProvider:h,emailProvider:E,socialProviders:J,demo:ge}),be={};if(ye.length>0&&t){m.log.info(f.bold("Credentials")+f.dim(" all optional \u2014 press Enter to skip, fill in .env later"));for(let c of ye)if(t=!0,c.secret){let l=await m.password({message:c.message,mask:"*"});T(l),typeof l=="string"&&l.trim()&&(be[c.key]=l.trim())}else{let l=await m.text({message:c.message,placeholder:c.placeholder});T(l),typeof l=="string"&&l.trim()&&(be[c.key]=l.trim())}}if(t){let c=[` Name: ${f.cyan(r)}`,` App name: ${f.cyan(i)}`,` Location: ${f.cyan(n)}`,` Frontend: ${f.cyan(Pe[o].label)}`,` Architecture: ${f.cyan(Ue[s].label)}`].join(`
4
+ `),l=[` Deploy target: ${f.cyan(B[a]?.label??"Node.js / Docker")}`,` Database: ${f.cyan(K[p].label)}`,` Cache: ${f.cyan(G[S].label)}`,y.length>0?` Docker: ${f.cyan(y.map(re=>he[re].label).join(", "))}`:` Docker: ${f.dim("none")}`].filter(Boolean).join(`
5
+ `),u=[h!=="none"?` Payment: ${f.cyan(Ve[h].label)} (${g})`:` Payment: ${f.dim("none")}`,` Credits: ${b?f.cyan("Yes"):f.dim("No")}`,` Email: ${f.cyan(Me[E].label)}`,` Multi-tenancy: ${v?f.cyan("Yes")+` (billing: ${Fe[D].label})`:f.dim("No")}`,` Blog: ${fe?f.cyan("Yes"):f.dim("No")}`,` Rev. sharing: ${te?f.cyan("Yes"):f.dim("No")}`,J.length>0?` Social login: ${f.cyan(J.map(re=>ie[re].label).join(", "))}`:` Social login: ${f.dim("none")}`,P.length>0?` AI tools: ${f.cyan(P.map(re=>Re[re].label).join(", "))}`:` AI tools: ${f.dim("none")}`].join(`
6
+ `),A=[f.bold("Project"),c,"",f.bold("Infrastructure"),l,"",f.bold("Features"),u];if(ye.length>0){let re=ye.map(Tt=>{let br=be[Tt.key]?f.green("provided"):f.dim("skipped");return` ${Tt.key}: ${br}`}).join(`
7
7
  `);A.push("",f.bold("Credentials"),re)}m.note(A.join(`
8
- `),"Summary");let k=await m.confirm({message:"Proceed with these settings?"});(m.isCancel(k)||!k)&&(m.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:i,projectDir:n,frontend:o,architecture:s,deploymentTarget:a,databaseProvider:p,cacheProvider:S,paymentProvider:h,emailProvider:E,multiTenancy:v,billingScope:D,blog:ue,revenueSharing:te,credits:b,dockerServices:y,aiTools:P,socialProviders:J,defaultCurrency:g,...Object.keys(be).length>0?{credentials:be}:{},...e?.baseUrl!==void 0?{baseUrl:e.baseUrl}:{},...fe!==void 0?{demo:fe}:{}}}import{rm as Pr}from"fs/promises";import{join as Rr}from"path";var kr=["apps/web-nuxt/content/en/blog","apps/web-nuxt/public/images/blog"];async function Pt(e){await Promise.all(kr.map(t=>Pr(Rr(e,t),{recursive:!0,force:!0})))}import{mkdir as Ur}from"fs/promises";import{Readable as Vr}from"stream";import{pipeline as Mr}from"stream/promises";import{extract as Fr}from"tar";import{join as le}from"path";import{homedir as Or}from"os";var Je=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",x=".generatesaas",X=le(x,"manifest.json"),Rt=le(x,"hashes.json"),Xe=le(x,"template-hashes.json"),Ze=le(x,"template"),kt=le(x,"staging"),Ot=le(x,"staging.json"),H=le(Or(),".generatesaas");var R=class extends Error{constructor(r,i){super(i);this.status=r}status;name="ApiError"};function L(e){return{apiKey:e,baseUrl:Je}}async function Z(e,t,r){let i=`${e.baseUrl}${t}`,n=await fetch(i,{...r,headers:{...r?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!n.ok){let o;try{o=(await n.json()).error??`API ${n.status}: ${t}`}catch{o=`API ${n.status}: ${t}`}throw new R(n.status,o)}return n}import{existsSync as Cr,readFileSync as Dr,writeFileSync as xr,mkdirSync as Lr}from"fs";import{dirname as Nr}from"path";import*as Q from"@clack/prompts";function lt(){if(!Cr(H))return null;try{let e=JSON.parse(Dr(H,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&Q.log.warning(`Found old GitHub token in ${H}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function q(e){Lr(Nr(H),{recursive:!0}),xr(H,JSON.stringify({apiKey:e},null," ")+`
9
- `,{mode:384})}async function he(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let r=lt();if(r)return r;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return Y()}async function Y(){let e=await Q.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return Q.isCancel(e)&&(Q.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function V(e){return await(await Z(e,"/versions")).json()}async function Ct(e,t){try{return await(await Z(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(r){if(r instanceof R&&r.status===404)return null;throw r}}async function Dt(e,t){return await(await Z(e,`/skill/${encodeURIComponent(t)}`)).json()}async function xt(e,t){return await(await Z(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Lt(e,t){return await(await Z(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Nt(e,t){let r=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({token:t})});if(!r.ok)throw new Error(`Verification service returned ${r.status}`);return await r.json()}var pt=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".wrangler",".devcontainer","playwright-report","test-results"]),jr=new Set(["data","mksaas",".claude",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","AGENTS.md","TODO.md","OVERVIEW.md","pnpm-lock.yaml"]),$r=["apps/cms","packages/blog","packages/cli","packages/cli-api","scripts/.env","scripts/.meta","infra/docker-compose.yml"];function ve(e){let t=e.split("/");for(let r of t)if(pt.has(r))return!0;if(jr.has(t[0]))return!0;for(let r of $r)if(e===r||e.startsWith(r+"/"))return!0;return!1}async function Oe(e,t,r){let i=await Z(e,`/template/${encodeURIComponent(t)}`);if(!i.body)throw new Error("Empty response body");await Ur(r,{recursive:!0});let n=Vr.fromWeb(i.body);await Mr(n,Fr({cwd:r,strip:1,filter:o=>{let s=o.replace(/^[^/]+\//,"");return s?!ve(s):!0}}))}import{mkdir as zr,readdir as Kr,rm as Br,writeFile as Gr}from"fs/promises";import{dirname as Hr,join as qr,relative as Yr}from"path";async function Qe(e){await zr(e,{recursive:!0})}async function d(e,t){await Qe(Hr(e)),await Gr(e,t,"utf-8")}async function jt(e){await Br(e,{force:!0})}async function pe(e,t,r){let i=[],n=await Kr(e,{withFileTypes:!0});for(let o of n){let s=qr(e,o.name),a=Yr(t,s);r(a)||(o.isDirectory()?i.push(...await pe(s,t,r)):o.isFile()&&i.push(s))}return i}async function $t(e){switch(e.cacheProvider){case"redis":await Wr(e),await Jr(e);break;case"upstash":await Xr(e),await Zr(e);break}}async function Wr(e){await d(`${e.projectDir}/packages/api/src/services/redis.ts`,`import type { Store } from "hono-rate-limiter";
8
+ `),"Summary");let k=await m.confirm({message:"Proceed with these settings?"});(m.isCancel(k)||!k)&&(m.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:i,projectDir:n,frontend:o,architecture:s,deploymentTarget:a,databaseProvider:p,cacheProvider:S,paymentProvider:h,emailProvider:E,multiTenancy:v,billingScope:D,blog:fe,revenueSharing:te,credits:b,dockerServices:y,aiTools:P,socialProviders:J,defaultCurrency:g,...Object.keys(be).length>0?{credentials:be}:{},...e?.baseUrl!==void 0?{baseUrl:e.baseUrl}:{},...ge!==void 0?{demo:ge}:{}}}import{rm as Pr}from"fs/promises";import{join as Rr}from"path";var kr=["apps/web-nuxt/content/en/blog","apps/web-nuxt/public/images/blog"];async function Pt(e){await Promise.all(kr.map(t=>Pr(Rr(e,t),{recursive:!0,force:!0})))}import{mkdir as Ur}from"fs/promises";import{Readable as Vr}from"stream";import{pipeline as Mr}from"stream/promises";import{extract as Fr}from"tar";import{join as le}from"path";import{homedir as Or}from"os";var Ze=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",x=".generatesaas",X=le(x,"manifest.json"),Rt=le(x,"hashes.json"),Qe=le(x,"template-hashes.json"),et=le(x,"template"),kt=le(x,"staging"),Ot=le(x,"staging.json"),H=le(Or(),".generatesaas");var R=class extends Error{constructor(r,i){super(i);this.status=r}status;name="ApiError"};function L(e){return{apiKey:e,baseUrl:Ze}}async function Z(e,t,r){let i=`${e.baseUrl}${t}`,n=await fetch(i,{...r,headers:{...r?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!n.ok){let o;try{o=(await n.json()).error??`API ${n.status}: ${t}`}catch{o=`API ${n.status}: ${t}`}throw new R(n.status,o)}return n}import{existsSync as Cr,readFileSync as Dr,writeFileSync as xr,mkdirSync as Lr}from"fs";import{dirname as Nr}from"path";import*as Q from"@clack/prompts";function lt(){if(!Cr(H))return null;try{let e=JSON.parse(Dr(H,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&Q.log.warning(`Found old GitHub token in ${H}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function q(e){Lr(Nr(H),{recursive:!0}),xr(H,JSON.stringify({apiKey:e},null," ")+`
9
+ `,{mode:384})}async function ve(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let r=lt();if(r)return r;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return Y()}async function Y(){let e=await Q.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return Q.isCancel(e)&&(Q.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function V(e){return await(await Z(e,"/versions")).json()}async function Ct(e,t){try{return await(await Z(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(r){if(r instanceof R&&r.status===404)return null;throw r}}async function Dt(e,t){return await(await Z(e,`/skill/${encodeURIComponent(t)}`)).json()}async function xt(e,t){return await(await Z(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Lt(e,t){return await(await Z(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Nt(e,t){let r=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({token:t})});if(!r.ok)throw new Error(`Verification service returned ${r.status}`);return await r.json()}var pt=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".wrangler",".devcontainer","playwright-report","test-results"]),jr=new Set(["data","mksaas",".claude",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","AGENTS.md","TODO.md","OVERVIEW.md","pnpm-lock.yaml"]),$r=["apps/cms","packages/blog","packages/cli","packages/cli-api","scripts/.env","scripts/.meta","infra/docker-compose.yml"];function Ee(e){let t=e.split("/");for(let r of t)if(pt.has(r))return!0;if(jr.has(t[0]))return!0;for(let r of $r)if(e===r||e.startsWith(r+"/"))return!0;return!1}async function Oe(e,t,r){let i=await Z(e,`/template/${encodeURIComponent(t)}`);if(!i.body)throw new Error("Empty response body");await Ur(r,{recursive:!0});let n=Vr.fromWeb(i.body);await Mr(n,Fr({cwd:r,strip:1,filter:o=>{let s=o.replace(/^[^/]+\//,"");return s?!Ee(s):!0}}))}import{mkdir as zr,readdir as Br,rm as Kr,writeFile as Gr}from"fs/promises";import{dirname as Hr,join as qr,relative as Yr}from"path";async function tt(e){await zr(e,{recursive:!0})}async function d(e,t){await tt(Hr(e)),await Gr(e,t,"utf-8")}async function jt(e){await Kr(e,{force:!0})}async function pe(e,t,r){let i=[],n=await Br(e,{withFileTypes:!0});for(let o of n){let s=qr(e,o.name),a=Yr(t,s);r(a)||(o.isDirectory()?i.push(...await pe(s,t,r)):o.isFile()&&i.push(s))}return i}async function $t(e){switch(e.cacheProvider){case"redis":await Wr(e),await Jr(e);break;case"upstash":await Xr(e),await Zr(e);break}}async function Wr(e){await d(`${e.projectDir}/packages/runtime/src/redis.ts`,`import type { Store } from "hono-rate-limiter";
10
10
  import { Redis } from "ioredis";
11
11
  import { RedisStore, type RedisReply } from "rate-limit-redis";
12
- import { env } from "../env.js";
12
+ import { env } from "./env.js";
13
13
 
14
14
  export const redis = new Redis(env.REDIS_URL);
15
15
 
16
- export const limiterStore = new RedisStore({
17
- sendCommand: (command: string, ...args: string[]) =>
18
- redis.call(command, ...args) as Promise<RedisReply>,
19
- }) as unknown as Store;
16
+ /**
17
+ * Build a \`hono-rate-limiter\`-compatible store backed by \`rate-limit-redis\`.
18
+ * Wraps RedisStore in an adapter exposing only the methods the middleware uses
19
+ * so we don't need an unsafe cross-package type cast.
20
+ */
21
+ function createLimiterStore(): Store {
22
+ const inner = new RedisStore({
23
+ sendCommand: (command: string, ...args: string[]) =>
24
+ redis.call(command, ...args) as Promise<RedisReply>
25
+ });
26
+ return {
27
+ init(options) {
28
+ // rate-limit-redis's init reads only windowMs from its options shape,
29
+ // so the express-rate-limit / hono-rate-limiter shape difference is irrelevant at runtime.
30
+ inner.init({ windowMs: options.windowMs } as Parameters<typeof inner.init>[0]);
31
+ },
32
+ increment: (key) => inner.increment(key),
33
+ decrement: (key) => inner.decrement(key),
34
+ resetKey: (key) => inner.resetKey(key)
35
+ };
36
+ }
37
+
38
+ export const limiterStore: Store = createLimiterStore();
20
39
 
21
40
  let closed = false;
22
41
 
23
- /** Gracefully close the Redis connection. */
42
+ /** Gracefully close the Redis connection; idempotent. Falls back to disconnect() on error. */
24
43
  export async function closeRedis() {
25
44
  if (closed) return;
26
45
  try {
@@ -32,7 +51,7 @@ export async function closeRedis() {
32
51
  closed = true;
33
52
  }
34
53
  }
35
- `)}async function Jr(e){await d(`${e.projectDir}/packages/api/src/services/mutex.ts`,`import { Mutex } from "redis-semaphore";
54
+ `)}async function Jr(e){await d(`${e.projectDir}/packages/runtime/src/mutex.ts`,`import { Mutex } from "redis-semaphore";
36
55
  import { redis } from "./redis.js";
37
56
 
38
57
  export class MutexTimeoutError extends Error {
@@ -65,9 +84,9 @@ export async function withMutex<T>(
65
84
  await mutex.release();
66
85
  }
67
86
  }
68
- `)}async function Xr(e){await d(`${e.projectDir}/packages/api/src/services/redis.ts`,`import { Redis as UpstashRedis } from "@upstash/redis";
87
+ `)}async function Xr(e){await d(`${e.projectDir}/packages/runtime/src/redis.ts`,`import { Redis as UpstashRedis } from "@upstash/redis";
69
88
  import type { Store } from "hono-rate-limiter";
70
- import { env } from "../env.js";
89
+ import { env } from "./env.js";
71
90
 
72
91
  const upstash = new UpstashRedis({
73
92
  url: env.UPSTASH_REDIS_REST_URL,
@@ -120,42 +139,41 @@ export const redis = {
120
139
  };
121
140
 
122
141
  /**
123
- * Rate-limit store compatible with hono-rate-limiter, backed by Upstash Redis.
124
- * Uses atomic INCR + PEXPIRE for a simple sliding window counter.
142
+ * Rate-limit store compatible with \`hono-rate-limiter\`, backed by Upstash Redis.
143
+ * Uses atomic INCR + PEXPIRE for a simple sliding-window counter. Returned as
144
+ * a plain object matching \`Store\` so no unsafe type cast is needed.
125
145
  */
126
- class UpstashRateLimitStore {
127
- windowMs = 60_000;
128
-
129
- init(options: { windowMs: number }): void {
130
- this.windowMs = options.windowMs;
131
- }
132
-
133
- async increment(key: string): Promise<{ totalHits: number; resetTime: Date }> {
134
- const totalHits = await upstash.incr(key);
135
- if (totalHits === 1) {
136
- await upstash.pexpire(key, this.windowMs);
137
- }
138
- const ttl = await upstash.pttl(key);
139
- return {
140
- totalHits,
141
- resetTime: new Date(Date.now() + Math.max(0, ttl)),
142
- };
143
- }
144
-
145
- async decrement(key: string): Promise<void> {
146
- await upstash.decr(key);
147
- }
148
-
149
- async resetKey(key: string): Promise<void> {
150
- await upstash.del(key);
151
- }
146
+ function createLimiterStore(): Store {
147
+ let windowMs = 60_000;
148
+ return {
149
+ init(options: { windowMs: number }): void {
150
+ windowMs = options.windowMs;
151
+ },
152
+ async increment(key: string): Promise<{ totalHits: number; resetTime: Date }> {
153
+ const totalHits = await upstash.incr(key);
154
+ if (totalHits === 1) {
155
+ await upstash.pexpire(key, windowMs);
156
+ }
157
+ const ttl = await upstash.pttl(key);
158
+ return {
159
+ totalHits,
160
+ resetTime: new Date(Date.now() + Math.max(0, ttl)),
161
+ };
162
+ },
163
+ async decrement(key: string): Promise<void> {
164
+ await upstash.decr(key);
165
+ },
166
+ async resetKey(key: string): Promise<void> {
167
+ await upstash.del(key);
168
+ },
169
+ };
152
170
  }
153
171
 
154
- export const limiterStore = new UpstashRateLimitStore() as unknown as Store;
172
+ export const limiterStore: Store = createLimiterStore();
155
173
 
156
174
  /** No persistent connection to close with Upstash REST. */
157
175
  export async function closeRedis(): Promise<void> {}
158
- `)}async function Zr(e){await d(`${e.projectDir}/packages/api/src/services/mutex.ts`,`import { redis } from "./redis.js";
176
+ `)}async function Zr(e){await d(`${e.projectDir}/packages/runtime/src/mutex.ts`,`import { redis } from "./redis.js";
159
177
 
160
178
  export class MutexTimeoutError extends Error {
161
179
  constructor(key: string) {
@@ -196,7 +214,7 @@ export async function withMutex<T>(
196
214
 
197
215
  throw new MutexTimeoutError(key);
198
216
  }
199
- `)}function Qr(e){let t=e.split(".");return t.length>=3?t.slice(1).join("."):e}async function Ut(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),r=e.paymentProvider!=="none",i=e.baseUrl??"http://localhost:3000",n=e.baseUrl?new URL(e.baseUrl).hostname:"example.com",o=Qr(n),s=e.demo?"false":"true",a=`import type { AppConfig } from "../types/index.js";
217
+ `)}function Qr(e){let t=e.split(".");return t.length>=3?t.slice(1).join("."):e}async function Ut(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),r=e.paymentProvider!=="none",i=e.baseUrl??"http://localhost:3000",n=e.baseUrl?new URL(e.baseUrl).hostname:"example.com",o=Qr(n),s=e.demo?"false":"true",a=`import type { AppConfig } from "@repo/config/types";
200
218
 
201
219
  const trustedOrigins = process.env.TRUSTED_ORIGINS?.split(",").map((s) => s.trim()).filter(Boolean);
202
220
 
@@ -359,9 +377,9 @@ export * from "./section-tabs.js";
359
377
  export * from "./sidebar.js";
360
378
  export * from "./tenancy.js";
361
379
  export * from "./user-menu.js";
362
- `,p=`${e.projectDir}/packages/core/src/config/index.ts`;await d(p,a)}import{readFile as en}from"fs/promises";import{join as tn}from"path";var rn=`export * from "./db/auth.js";
380
+ `,p=`${e.projectDir}/packages/config/src/index.ts`;await d(p,a)}import{readFile as en}from"fs/promises";import{join as tn}from"path";var rn=`export * from "./db/auth.js";
363
381
  export * from "./db/schema.js";
364
- export type { User, Account, Organization, Member } from "./db/auth.js";`;async function Vt(e){let t=tn(e.projectDir,"packages/db/src/index.ts"),r=rn;try{let n=await en(t,"utf-8"),o=nn(n);o&&(r=o)}catch{}let i;switch(e.databaseProvider){case"postgres":i=on(r);break;case"neon":i=sn(r);break;case"supabase":i=an(r);break}await d(t,i)}function nn(e){return e.split(`
382
+ export type { User, Account, Organization, Member } from "./db/auth.js";`;async function Vt(e){let t=tn(e.projectDir,"packages/database/src/index.ts"),r=rn;try{let n=await en(t,"utf-8"),o=nn(n);o&&(r=o)}catch{}let i;switch(e.databaseProvider){case"postgres":i=on(r);break;case"neon":i=sn(r);break;case"supabase":i=an(r);break}await d(t,i)}function nn(e){return e.split(`
365
383
  `).filter(i=>i.startsWith("export type ")||i.startsWith("export * from")).join(`
366
384
  `)}function on(e){return`import { drizzle } from "drizzle-orm/node-postgres";
367
385
  import { z } from "zod";
@@ -410,7 +428,7 @@ const client = postgres(parsed.data.DATABASE_URL);
410
428
  export const db = drizzle(client, { schema });
411
429
 
412
430
  ${e}
413
- `}async function Mt(e){let t=[...e.dockerServices];if(B[e.databaseProvider].managed&&(t=t.filter(o=>o!=="postgres")),G[e.cacheProvider].managed&&(t=t.filter(o=>o!=="redis")),t.length===0)return!1;let r=[],i=[];t.includes("postgres")&&(r.push(` postgres:
431
+ `}async function Mt(e){let t=[...e.dockerServices];if(K[e.databaseProvider].managed&&(t=t.filter(o=>o!=="postgres")),G[e.cacheProvider].managed&&(t=t.filter(o=>o!=="redis")),t.length===0)return!1;let r=[],i=[];t.includes("postgres")&&(r.push(` postgres:
414
432
  image: postgres:18-alpine
415
433
  ports:
416
434
  - "\${POSTGRES_PORT:-5432}:5432"
@@ -456,23 +474,36 @@ ${i.join(`
456
474
  `)}
457
475
  `),await d(`${e.projectDir}/infra/docker-compose.yml`,n),!0}async function Ft(e){if(e.architecture!=="separate")return;let t;switch(e.deploymentTarget){case"node":t=cn();break;case"cloudflare":t=ln();break;case"vercel":t=pn();break}await d(`${e.projectDir}/apps/backend/src/index.ts`,t)}function cn(){return`import "dotenv/config";
458
476
  import { serve } from "@hono/node-server";
459
- import app, { closeRedis, env, logger } from "@repo/api";
477
+ import app from "@repo/api";
478
+ import { closeRedis, env, logger } from "@repo/runtime";
460
479
 
461
- const server = serve(
462
- { fetch: app.fetch, port: env.API_PORT },
463
- (info) => {
464
- logger.info(\`API listening on http://localhost:\${info.port}\`);
465
- },
466
- );
480
+ async function bootstrap() {
481
+ const apiServer = serve({
482
+ fetch: app.fetch,
483
+ port: env.API_PORT,
484
+ });
485
+ logger.info(\`[API] Listening on port \${env.API_PORT}\`);
486
+
487
+ const shutdown = async (signal: string) => {
488
+ logger.info("[Backend] Shutting down", { signal });
489
+ try {
490
+ await closeRedis();
491
+ } catch (err) {
492
+ logger.error("[Backend] Redis close error during shutdown", err);
493
+ }
494
+ apiServer.close(() => {
495
+ process.exit(0);
496
+ });
497
+ };
467
498
 
468
- async function shutdown() {
469
- server.close();
470
- await closeRedis();
471
- process.exit(0);
499
+ process.on("SIGINT", () => void shutdown("SIGINT"));
500
+ process.on("SIGTERM", () => void shutdown("SIGTERM"));
472
501
  }
473
502
 
474
- process.on("SIGINT", shutdown);
475
- process.on("SIGTERM", shutdown);
503
+ bootstrap().catch((error) => {
504
+ logger.error("[Backend] Fatal error", error);
505
+ process.exit(1);
506
+ });
476
507
  `}function ln(){return`import app from "@repo/api";
477
508
 
478
509
  export default app;
@@ -480,14 +511,14 @@ export default app;
480
511
  import app from "@repo/api";
481
512
 
482
513
  export default handle(app);
483
- `}var dn={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]};function mn(e){let t=ie[e];return t.envVars.map((r,i)=>({key:r.name,...i===0?{comment:`# TODO: Add your ${t.label} OAuth credentials`}:{}}))}var un={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function Ee(e,t){return t?e.map(r=>{let i=t[r.key];return i?{...r,defaultValue:i,comment:void 0}:r}):e}function Se(e,t){for(let r of e)r.comment&&t.push(r.comment),r.defaultValue!==void 0?t.push(`${r.key}=${r.defaultValue}`):t.push(`#${r.key}=`)}function dt(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function zt(e){return e.architecture==="fullstack"?{apiUrl:"http://localhost:3001/api",baseUrl:"http://localhost:3001"}:{apiUrl:`http://localhost:${e.deploymentTarget==="cloudflare"?8787:3010}`,baseUrl:"http://localhost:3001"}}function fn(e){let{architecture:t,deploymentTarget:r}=e;return t==="fullstack"?r==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://your-app.vercel.app"}:r==="node"?{frontend:"https://your-app.example.com",backend:"https://your-app.example.com"}:null:r==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://api-your-app.vercel.app"}:r==="cloudflare"?{frontend:"https://your-app.example.com",backend:"https://your-app.workers.dev"}:{frontend:"https://your-app.example.com",backend:"https://your-app.example.com/api"}}function gn(e){let t=crypto.randomUUID(),r=dt(32),i=dt(32),{apiUrl:n,baseUrl:o}=zt(e),s=["# API Configuration",`API_URL=${n}`,`BASE_URL=${o}`];s.push("","# Database"),Se(Ee(B[e.databaseProvider].envVars,e.credentials),s),s.push("","# Cache"),Se(Ee(G[e.cacheProvider].envVars,e.credentials),s),s.push("","# Authentication",`BETTER_AUTH_SECRET=${t}`,"","# Job Queue - Inngest","INNGEST_APP_ID=api",`INNGEST_EVENT_KEY=${r}`,`INNGEST_SIGNING_KEY=${i}`,"INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&(s.push("","# API Port (standalone backend)","API_PORT=3010"),s.push("","# CORS + cross-subdomain cookies (production only \u2014 leave unset for local dev)","# TRUSTED_ORIGINS=https://your-app.example.com","# AUTH_COOKIE_DOMAIN=.example.com"));let a=dn[e.emailProvider];if(a&&(s.push("","# Email"),Se(Ee(a,e.credentials),s)),e.paymentProvider!=="none"){let p=un[e.paymentProvider];p&&(s.push("","# Payment"),Se(Ee(p,e.credentials),s))}if(e.socialProviders.length>0){s.push("","# Social auth");for(let p of e.socialProviders)Se(Ee(mn(p),e.credentials),s)}return e.demo&&(s.push("","# Captcha (Cloudflare Turnstile)"),Se(Ee([{key:"TURNSTILE_SECRET_KEY",comment:"# TODO: Add your Cloudflare Turnstile secret key"}],e.credentials),s)),s.push(""),s.join(`
514
+ `}var dn={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]};function mn(e){let t=ie[e];return t.envVars.map((r,i)=>({key:r.name,...i===0?{comment:`# TODO: Add your ${t.label} OAuth credentials`}:{}}))}var un={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function Se(e,t){return t?e.map(r=>{let i=t[r.key];return i?{...r,defaultValue:i,comment:void 0}:r}):e}function Ie(e,t){for(let r of e)r.comment&&t.push(r.comment),r.defaultValue!==void 0?t.push(`${r.key}=${r.defaultValue}`):t.push(`#${r.key}=`)}function dt(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function zt(e){return e.architecture==="fullstack"?{apiUrl:"http://localhost:3001/api",baseUrl:"http://localhost:3001"}:{apiUrl:`http://localhost:${e.deploymentTarget==="cloudflare"?8787:3010}`,baseUrl:"http://localhost:3001"}}function fn(e){let{architecture:t,deploymentTarget:r}=e;return t==="fullstack"?r==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://your-app.vercel.app"}:r==="node"?{frontend:"https://your-app.example.com",backend:"https://your-app.example.com"}:null:r==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://api-your-app.vercel.app"}:r==="cloudflare"?{frontend:"https://your-app.example.com",backend:"https://your-app.workers.dev"}:{frontend:"https://your-app.example.com",backend:"https://your-app.example.com/api"}}function gn(e){let t=crypto.randomUUID(),r=dt(32),i=dt(32),{apiUrl:n,baseUrl:o}=zt(e),s=["# API Configuration",`API_URL=${n}`,`BASE_URL=${o}`];s.push("","# Database"),Ie(Se(K[e.databaseProvider].envVars,e.credentials),s),s.push("","# Cache"),Ie(Se(G[e.cacheProvider].envVars,e.credentials),s),s.push("","# Authentication",`BETTER_AUTH_SECRET=${t}`,"","# Job Queue - Inngest","INNGEST_APP_ID=api",`INNGEST_EVENT_KEY=${r}`,`INNGEST_SIGNING_KEY=${i}`,"INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&(s.push("","# API Port (standalone backend)","API_PORT=3010"),s.push("","# CORS + cross-subdomain cookies (production only \u2014 leave unset for local dev)","# TRUSTED_ORIGINS=https://your-app.example.com","# AUTH_COOKIE_DOMAIN=.example.com"));let a=dn[e.emailProvider];if(a&&(s.push("","# Email"),Ie(Se(a,e.credentials),s)),e.paymentProvider!=="none"){let p=un[e.paymentProvider];p&&(s.push("","# Payment"),Ie(Se(p,e.credentials),s))}if(e.socialProviders.length>0){s.push("","# Social auth");for(let p of e.socialProviders)Ie(Se(mn(p),e.credentials),s)}return e.demo&&(s.push("","# Captcha (Cloudflare Turnstile)"),Ie(Se([{key:"TURNSTILE_SECRET_KEY",comment:"# TODO: Add your Cloudflare Turnstile secret key"}],e.credentials),s)),s.push(""),s.join(`
484
515
  `)}var yn={vercel:"vercel"};function hn(e){let{apiUrl:t}=zt(e),r=["# API Configuration",`NUXT_PUBLIC_API_URL=${t}`,"","# Signs OG image URLs to prevent arbitrary image generation requests",`NUXT_OG_IMAGE_SECRET=${dt(32)}`];if(e.architecture==="fullstack"){let n=yn[e.deploymentTarget];n&&r.push("","# Build",`NITRO_PRESET=${n}`)}let i=fn(e);return i&&e.architecture==="separate"&&r.push("","# Production (uncomment and replace with your deployed hostnames):",`# NUXT_PUBLIC_API_URL=${i.backend}`),r.push(""),r.join(`
485
- `)}async function Kt(e){let t=gn(e),r=hn(e);if(e.architecture==="fullstack"){let i=r+`
486
- `+t;await d(`${e.projectDir}/apps/web-nuxt/.env`,i)}else await d(`${e.projectDir}/apps/web-nuxt/.env`,r),await d(`${e.projectDir}/apps/backend/.env`,t)}import{join as Gt,relative as En}from"path";import{createHash as Bt}from"crypto";import{readFile as vn}from"fs/promises";async function et(e){let t=await vn(e);return Bt("sha256").update(t).digest("hex")}function mt(e){return Bt("sha256").update(e).digest("hex")}var Sn=new Set(["data",x]);function _n(e){let t=e.split("/");for(let r of t)if(pt.has(r)||Sn.has(r)||r.startsWith(".env")&&!r.includes("example"))return!0;return!1}async function Ht(e,t){let i=(await pe(e.projectDir,e.projectDir,_n)).sort(),n=await Promise.all(i.map(async a=>[En(e.projectDir,a),await et(a)])),o=Object.fromEntries(n),s={version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",frontend:e.frontend,aiTools:e.aiTools,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,revenueSharing:e.revenueSharing,...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}};await d(Gt(e.projectDir,X),JSON.stringify(s,null," ")+`
516
+ `)}async function Bt(e){let t=gn(e),r=hn(e);if(e.architecture==="fullstack"){let i=r+`
517
+ `+t;await d(`${e.projectDir}/apps/web-nuxt/.env`,i)}else await d(`${e.projectDir}/apps/web-nuxt/.env`,r),await d(`${e.projectDir}/apps/backend/.env`,t)}import{join as Gt,relative as En}from"path";import{createHash as Kt}from"crypto";import{readFile as vn}from"fs/promises";async function rt(e){let t=await vn(e);return Kt("sha256").update(t).digest("hex")}function mt(e){return Kt("sha256").update(e).digest("hex")}var Sn=new Set(["data",x]);function In(e){let t=e.split("/");for(let r of t)if(pt.has(r)||Sn.has(r)||r.startsWith(".env")&&!r.includes("example"))return!0;return!1}async function Ht(e,t){let i=(await pe(e.projectDir,e.projectDir,In)).sort(),n=await Promise.all(i.map(async a=>[En(e.projectDir,a),await rt(a)])),o=Object.fromEntries(n),s={version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",frontend:e.frontend,aiTools:e.aiTools,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,revenueSharing:e.revenueSharing,...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}};await d(Gt(e.projectDir,X),JSON.stringify(s,null," ")+`
487
518
  `),await d(Gt(e.projectDir,Rt),JSON.stringify(o,null," ")+`
488
- `)}import{readFile as qt}from"fs/promises";import{join as _e}from"path";var Ce={"@upstash/redis":"^1.37.0","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7",wrangler:"^4.19.1","@cloudflare/workers-types":"^4.20260310.1"};async function tt(e){let t=await qt(e,"utf-8");return JSON.parse(t)}async function rt(e,t){await d(e,JSON.stringify(t,null," ")+`
489
- `)}function Te(e,t){for(let r of t)delete e.dependencies?.[r],delete e.devDependencies?.[r]}function Ie(e,t,r,i=!1){let n=i?"devDependencies":"dependencies";e[n]||(e[n]={}),e[n][t]=r}async function Yt(e){await Tn(e),await In(e),await An(e),await wn(e)}async function Tn(e){let t=_e(e.projectDir,"packages/api/package.json"),r=await tt(t);Te(r,["sharp","@types/sharp"]),e.cacheProvider==="upstash"&&(Te(r,["ioredis","rate-limit-redis","redis-semaphore"]),Ie(r,"@upstash/redis",Ce["@upstash/redis"])),await rt(t,r)}async function In(e){let t=_e(e.projectDir,"packages/db/package.json"),r=await tt(t);e.databaseProvider==="neon"?(Te(r,["pg","@types/pg"]),Ie(r,"@neondatabase/serverless",Ce["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(Te(r,["pg","@types/pg"]),Ie(r,"postgres",Ce.postgres)),await rt(t,r)}async function An(e){if(e.architecture!=="separate")return;let t=_e(e.projectDir,"apps/backend/package.json"),r=await tt(t);if(e.deploymentTarget!=="node"&&Te(r,["@hono/node-server","dotenv"]),e.deploymentTarget==="cloudflare"){Te(r,["tsup"]),delete r.tsup,Ie(r,"wrangler",Ce.wrangler,!0),Ie(r,"@cloudflare/workers-types",Ce["@cloudflare/workers-types"],!0);let i=r.scripts??={};i.build="wrangler deploy --dry-run --outdir=dist",i.dev="wrangler dev",i.start="wrangler deploy"}await rt(t,r),e.deploymentTarget==="cloudflare"&&await bn(e.projectDir)}async function wn(e){if(e.architecture!=="separate")return;await jt(_e(e.projectDir,"apps/web-nuxt/server/api/[...paths].ts"));let t=_e(e.projectDir,"apps/web-nuxt/package.json"),r=await tt(t),i=r.dependencies?.["@repo/api"];i&&(delete r.dependencies?.["@repo/api"],Ie(r,"@repo/api",i,!0)),await rt(t,r)}async function bn(e){let t=_e(e,"apps/backend/tsconfig.json"),r=await qt(t,"utf-8"),i=JSON.parse(r),n=i.compilerOptions??={},o=n.types??[];o.includes("@cloudflare/workers-types")||(n.types=[...o,"@cloudflare/workers-types"]),await d(t,JSON.stringify(i,null," ")+`
490
- `)}import{readdir as Pn,rm as Rn}from"fs/promises";import{join as Wt}from"path";var kn=new Set(["ci.yml"]);async function Jt(e){if(e.demo)return;let t=Wt(e.projectDir,".github/workflows"),r=await Pn(t).catch(()=>[]);for(let i of r)kn.has(i)||await Rn(Wt(t,i),{recursive:!0,force:!0})}import{readFile as On}from"fs/promises";import{join as nt}from"path";var Cn=`import { sql } from "drizzle-orm";
519
+ `)}import{readFile as qt}from"fs/promises";import{join as de}from"path";var Ce={"@upstash/redis":"^1.37.0","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7",wrangler:"^4.19.1","@cloudflare/workers-types":"^4.20260310.1"};async function De(e){let t=await qt(e,"utf-8");return JSON.parse(t)}async function xe(e,t){await d(e,JSON.stringify(t,null," ")+`
520
+ `)}function Te(e,t){for(let r of t)delete e.dependencies?.[r],delete e.devDependencies?.[r]}function _e(e,t,r,i=!1){let n=i?"devDependencies":"dependencies";e[n]||(e[n]={}),e[n][t]=r}async function Yt(e){await Tn(e),await _n(e),await An(e),await wn(e),await bn(e)}async function Tn(e){let t=de(e.projectDir,"packages/api/package.json"),r=await De(t);Te(r,["sharp","@types/sharp"]),await xe(t,r)}async function _n(e){let t=de(e.projectDir,"packages/runtime/package.json"),r=await De(t);e.cacheProvider==="upstash"&&(Te(r,["ioredis","rate-limit-redis","redis-semaphore"]),_e(r,"@upstash/redis",Ce["@upstash/redis"])),await xe(t,r)}async function An(e){let t=de(e.projectDir,"packages/database/package.json"),r=await De(t);e.databaseProvider==="neon"?(Te(r,["pg","@types/pg"]),_e(r,"@neondatabase/serverless",Ce["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(Te(r,["pg","@types/pg"]),_e(r,"postgres",Ce.postgres)),await xe(t,r)}async function wn(e){if(e.architecture!=="separate")return;let t=de(e.projectDir,"apps/backend/package.json"),r=await De(t);if(e.deploymentTarget!=="node"&&Te(r,["@hono/node-server","dotenv"]),e.deploymentTarget==="cloudflare"){Te(r,["tsup"]),delete r.tsup,_e(r,"wrangler",Ce.wrangler,!0),_e(r,"@cloudflare/workers-types",Ce["@cloudflare/workers-types"],!0);let i=r.scripts??={};i.build="wrangler deploy --dry-run --outdir=dist",i.dev="wrangler dev",i.start="wrangler deploy"}await xe(t,r),e.deploymentTarget==="cloudflare"&&await Pn(e.projectDir)}async function bn(e){if(e.architecture!=="separate")return;await jt(de(e.projectDir,"apps/web-nuxt/server/api/[...paths].ts"));let t=de(e.projectDir,"apps/web-nuxt/package.json"),r=await De(t),i=r.dependencies?.["@repo/api"];i&&(delete r.dependencies?.["@repo/api"],_e(r,"@repo/api",i,!0)),await xe(t,r)}async function Pn(e){let t=de(e,"apps/backend/tsconfig.json"),r=await qt(t,"utf-8"),i=JSON.parse(r),n=i.compilerOptions??={},o=n.types??[];o.includes("@cloudflare/workers-types")||(n.types=[...o,"@cloudflare/workers-types"]),await d(t,JSON.stringify(i,null," ")+`
521
+ `)}import{readdir as Rn,rm as kn}from"fs/promises";import{join as Wt}from"path";var On=new Set(["ci.yml"]);async function Jt(e){if(e.demo)return;let t=Wt(e.projectDir,".github/workflows"),r=await Rn(t).catch(()=>[]);for(let i of r)On.has(i)||await kn(Wt(t,i),{recursive:!0,force:!0})}import{readFile as Cn}from"fs/promises";import{join as nt}from"path";var Dn=`import { sql } from "drizzle-orm";
491
522
  import { db } from "./index.js";
492
523
 
493
524
  /**
@@ -501,8 +532,8 @@ import { db } from "./index.js";
501
532
  await db.execute(sql.raw("DROP SCHEMA public CASCADE"));
502
533
  await db.execute(sql.raw("CREATE SCHEMA public"));
503
534
  console.log("[db] reset public schema");
504
- `;async function ut(e,t,r){let i=await On(e,"utf-8"),n=JSON.parse(i);n.scripts={...n.scripts,[t]:r},await d(e,JSON.stringify(n,null," ")+`
505
- `)}async function Xt(e){if(!e.demo)return;await d(nt(e.projectDir,"packages/db/src/reset.ts"),Cn),await ut(nt(e.projectDir,"packages/db/package.json"),"reset","tsx src/reset.ts");let t="pnpm -F @repo/db reset && pnpm -F @repo/db push --force && pnpm build";await ut(nt(e.projectDir,"package.json"),"demo-build",t),await ut(nt(e.projectDir,"apps/web-nuxt/package.json"),"demo-build",t)}async function Zt(e){let r=`import { z } from "zod";
535
+ `;async function ut(e,t,r){let i=await Cn(e,"utf-8"),n=JSON.parse(i);n.scripts={...n.scripts,[t]:r},await d(e,JSON.stringify(n,null," ")+`
536
+ `)}async function Xt(e){if(!e.demo)return;await d(nt(e.projectDir,"packages/database/src/reset.ts"),Dn),await ut(nt(e.projectDir,"packages/database/package.json"),"reset","tsx src/reset.ts");let t="pnpm -F @repo/database reset && pnpm -F @repo/database push --force && pnpm build";await ut(nt(e.projectDir,"package.json"),"demo-build",t),await ut(nt(e.projectDir,"apps/web-nuxt/package.json"),"demo-build",t)}async function Zt(e){let r=`import { z } from "zod";
506
537
 
507
538
  const EnvSchema = z.object({
508
539
  NODE_ENV: z.enum(["development", "production"]).default("development"),
@@ -516,6 +547,9 @@ const EnvSchema = z.object({
516
547
  process.env.PUBLIC_API_URL,
517
548
  z.url()
518
549
  ),
550
+ BASE_URL: z.url().optional(),
551
+ TRUSTED_ORIGINS: z.string().optional(),
552
+ AUTH_COOKIE_DOMAIN: z.string().optional(),
519
553
 
520
554
  ${e.cacheProvider==="upstash"?` UPSTASH_REDIS_REST_URL: z.string(),
521
555
  UPSTASH_REDIS_REST_TOKEN: z.string(),`:" REDIS_URL: z.string(),"}
@@ -607,7 +641,7 @@ export const env = (() => {
607
641
  const message = parsed.error.issues
608
642
  .map((issue) => \`\${issue.path.join(".") || "unknown"}: \${issue.message}\`)
609
643
  .join(", ");
610
- throw new Error(\`Invalid api package environment: \${message}\`);
644
+ throw new Error(\`Invalid runtime package environment: \${message}\`);
611
645
  }
612
646
  return parsed.data;
613
647
  })();
@@ -615,11 +649,11 @@ export const env = (() => {
615
649
  const parsedApiUrl = new URL(env.API_URL);
616
650
  export const apiBasePath = parsedApiUrl.pathname === "/" ? "" : parsedApiUrl.pathname;
617
651
  export const apiOrigin = parsedApiUrl.origin;
618
- `;await d(`${e.projectDir}/packages/api/src/env.ts`,r)}import{join as Qt}from"path";async function er(e){let t=Qt(e.projectDir,"packages/api/src/services/payments/provider"),r=`// Active payment provider. To switch, change the path below to
652
+ `;await d(`${e.projectDir}/packages/runtime/src/env.ts`,r)}import{join as Qt}from"path";async function er(e){let t=Qt(e.projectDir,"packages/payments/src/providers"),r=`// Active payment provider. To switch, change the path below to
619
653
  // "./polar/index.js" or "./none/index.js" (other folders are kept in place).
620
654
  export { ops } from "./${e.paymentProvider}/index.js";
621
- `;await d(Qt(t,"index.ts"),r)}function Dn(e){return e==="stripe"?' stripePriceId: "",':' polarProductId: "",'}function ft(e){let t=[];return e.withCredits&&(t.push(` credits: ${e.credits},`),t.push(" creditInterval: 30,")),t.push(` apiRateLimit: { maxRequests: ${e.rateLimit} }`),e.trial&&(t[t.length-1]+=",",t.push(" trialDays: 14"),e.withCredits&&(t[t.length-1]+=",",t.push(" grantCreditsOnTrial: true"))),t.join(`
622
- `)}async function tr(e){let t=`${e.projectDir}/packages/core/src/config/pricing.ts`,r=e.defaultCurrency;if(e.paymentProvider==="none"){let g=`import type { PricingConfig } from "../types/index.js";
655
+ `;await d(Qt(t,"index.ts"),r)}function xn(e){return e==="stripe"?' stripePriceId: "",':' polarProductId: "",'}function ft(e){let t=[];return e.withCredits&&(t.push(` credits: ${e.credits},`),t.push(" creditInterval: 30,")),t.push(` apiRateLimit: { maxRequests: ${e.rateLimit} }`),e.trial&&(t[t.length-1]+=",",t.push(" trialDays: 14"),e.withCredits&&(t[t.length-1]+=",",t.push(" grantCreditsOnTrial: true"))),t.join(`
656
+ `)}async function tr(e){let t=`${e.projectDir}/packages/config/src/pricing.ts`,r=e.defaultCurrency;if(e.paymentProvider==="none"){let g=`import type { PricingConfig } from "@repo/config/types";
623
657
 
624
658
  export const pricingConfig: PricingConfig = {
625
659
  defaultPlan: "free",
@@ -648,7 +682,7 @@ export const pricingConfig: PricingConfig = {
648
682
  credits: { enabled: false },
649
683
  products: { enabled: false, items: [] }
650
684
  };
651
- `;await d(t,g);return}let i=e.paymentProvider,n=Dn(i),o=e.credits,s=ft({credits:5,rateLimit:100,trial:!1,withCredits:o}),a=ft({credits:10,rateLimit:1e3,trial:!0,withCredits:o}),p=ft({credits:50,rateLimit:5e3,trial:!0,withCredits:o}),h=`import type { PricingConfig } from "../types/index.js";
685
+ `;await d(t,g);return}let i=e.paymentProvider,n=xn(i),o=e.credits,s=ft({credits:5,rateLimit:100,trial:!1,withCredits:o}),a=ft({credits:10,rateLimit:1e3,trial:!0,withCredits:o}),p=ft({credits:50,rateLimit:5e3,trial:!0,withCredits:o}),h=`import type { PricingConfig } from "@repo/config/types";
652
686
 
653
687
  export const pricingConfig: PricingConfig = {
654
688
  defaultPlan: "free",
@@ -738,28 +772,28 @@ ${o?" credits: { enabled: true }":" credits: { enabled: false }"},
738
772
  items: []
739
773
  }
740
774
  };
741
- `;await d(t,h)}function xn(e){let t=[];e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let r=e.frontend==="nuxt"?"Nuxt":e.frontend;if(t.push({type:"node-terminal",request:"launch",name:r,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Email",command:"pnpm dev:email",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.paymentProvider==="stripe"){let i=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${i}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Ln(e){let t=e.frontend==="nuxt"?"Nuxt":e.frontend,r=[];return e.architecture==="separate"?r.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):r.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),r}async function rr(e){let t={version:"0.2.0",configurations:xn(e),compounds:Ln(e)};await d(`${e.projectDir}/.vscode/launch.json`,JSON.stringify(t,null," ")+`
742
- `)}import{relative as Nn}from"path";async function De(e){let r=(await pe(e,e,ve)).sort(),i=await Promise.all(r.map(async n=>[Nn(e,n),await et(n)]));return Object.fromEntries(i)}import{copyFile as jn,mkdir as $n,rm as Un}from"fs/promises";import{dirname as Vn,join as nr,relative as Mn}from"path";import{existsSync as Fn}from"fs";async function ir(e,t){let r=nr(t,Ze);Fn(r)&&await Un(r,{recursive:!0,force:!0});let i=await pe(e,e,ve);for(let n of i){let o=Mn(e,n),s=nr(r,o);await $n(Vn(s),{recursive:!0}),await jn(n,s)}}import{existsSync as zn}from"fs";import{readFile as or,readdir as Kn}from"fs/promises";import{join as M,dirname as Bn,resolve as Gn,sep as Hn}from"path";import{fileURLToPath as qn}from"url";var xe={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Yn=Object.values(xe),gt="generatesaas-update",sr=Bn(qn(import.meta.url));function Wn(){let e=M(sr,"skill","content");return zn(e)?e:M(sr,"content")}function yt(e){return!e||e.length===0?Yn:e.map(t=>xe[t])}async function ht(e,t,r,i){let n=yt(i);for(let o of n){let s=M(e,o,gt),a=M(s,"scripts"),p=M(s,"references");await Qe(a),await Qe(p),await d(M(s,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",o)),await d(M(p,".gitkeep"),"");for(let[S,h]of Object.entries(r)){let g=Gn(a,S);g.startsWith(a+Hn)&&await d(g,h)}}}async function ar(e,t){let r=Wn(),i=await or(M(r,"SKILL.md"),"utf-8"),n=M(r,"scripts"),o=await Kn(n),s={};for(let a of o)a!==".gitkeep"&&(s[a]=await or(M(n,a),"utf-8"));await ht(e,i,s,t)}import{execFile as Jn,execFileSync as Xn}from"child_process";import{access as Zn}from"fs/promises";import{join as Qn}from"path";import*as F from"@clack/prompts";function ot(e){try{let t=process.platform==="win32"?"where":"which";return Xn(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function it(e,t,r,i=3e5){return new Promise((n,o)=>{Jn(e,t,{cwd:r,timeout:i},s=>{s?o(s):n()})})}async function cr(e){if(!ot("pnpm"))return F.log.warn("pnpm not found. Skipping dependency installation."),F.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=F.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await it("pnpm",["install"],e),t.stop("Dependencies installed."),!0}catch{return t.stop("Dependency installation failed."),F.log.warn("pnpm install failed. You can run it manually later."),!1}}async function lr(e){try{return await Zn(Qn(e,".git")),F.log.info("Git repository already exists, skipping init."),!0}catch{}if(!ot("git"))return F.log.warn("git not found. Skipping repository initialization."),!1;let t=F.spinner();t.start("Initializing git repository...");try{return await it("git",["init"],e),await it("git",["add","-A"],e),await it("git",["commit","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),F.log.warn("You can run git init manually later."),!1}}import*as Ae from"@clack/prompts";import N from"picocolors";function pr(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&Ae.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let r=[];if(r.push(`cd ${e.projectDir}`),t.pnpmInstalled||r.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(s=>ye[s].label).join(", ");r.push(`pnpm infra ${N.dim(`# ${o}`)}`)}if(r.push(`pnpm dev ${N.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(r.push(""),r.push(N.dim("Fill in remaining TODO values in .env"))),Ae.note(r.join(`
775
+ `;await d(t,h)}function Ln(e){let t=[];e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let r=e.frontend==="nuxt"?"Nuxt":e.frontend;if(t.push({type:"node-terminal",request:"launch",name:r,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Mail",command:"pnpm dev:mail",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.paymentProvider==="stripe"){let i=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${i}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Nn(e){let t=e.frontend==="nuxt"?"Nuxt":e.frontend,r=[];return e.architecture==="separate"?r.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):r.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),r}async function rr(e){let t={version:"0.2.0",configurations:Ln(e),compounds:Nn(e)};await d(`${e.projectDir}/.vscode/launch.json`,JSON.stringify(t,null," ")+`
776
+ `)}import{relative as jn}from"path";async function Le(e){let r=(await pe(e,e,Ee)).sort(),i=await Promise.all(r.map(async n=>[jn(e,n),await rt(n)]));return Object.fromEntries(i)}import{copyFile as $n,mkdir as Un,rm as Vn}from"fs/promises";import{dirname as Mn,join as nr,relative as Fn}from"path";import{existsSync as zn}from"fs";async function ir(e,t){let r=nr(t,et);zn(r)&&await Vn(r,{recursive:!0,force:!0});let i=await pe(e,e,Ee);for(let n of i){let o=Fn(e,n),s=nr(r,o);await Un(Mn(s),{recursive:!0}),await $n(n,s)}}import{existsSync as Bn}from"fs";import{readFile as or,readdir as Kn}from"fs/promises";import{join as M,dirname as Gn,resolve as Hn,sep as qn}from"path";import{fileURLToPath as Yn}from"url";var Ne={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Wn=Object.values(Ne),gt="generatesaas-update",sr=Gn(Yn(import.meta.url));function Jn(){let e=M(sr,"skill","content");return Bn(e)?e:M(sr,"content")}function yt(e){return!e||e.length===0?Wn:e.map(t=>Ne[t])}async function ht(e,t,r,i){let n=yt(i);for(let o of n){let s=M(e,o,gt),a=M(s,"scripts"),p=M(s,"references");await tt(a),await tt(p),await d(M(s,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",o)),await d(M(p,".gitkeep"),"");for(let[S,h]of Object.entries(r)){let g=Hn(a,S);g.startsWith(a+qn)&&await d(g,h)}}}async function ar(e,t){let r=Jn(),i=await or(M(r,"SKILL.md"),"utf-8"),n=M(r,"scripts"),o=await Kn(n),s={};for(let a of o)a!==".gitkeep"&&(s[a]=await or(M(n,a),"utf-8"));await ht(e,i,s,t)}import{execFile as Xn,execFileSync as Zn}from"child_process";import{access as Qn}from"fs/promises";import{join as ei}from"path";import*as F from"@clack/prompts";function ot(e){try{let t=process.platform==="win32"?"where":"which";return Zn(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function it(e,t,r,i=3e5){return new Promise((n,o)=>{Xn(e,t,{cwd:r,timeout:i},s=>{s?o(s):n()})})}async function cr(e){if(!ot("pnpm"))return F.log.warn("pnpm not found. Skipping dependency installation."),F.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=F.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await it("pnpm",["install"],e),t.stop("Dependencies installed."),!0}catch{return t.stop("Dependency installation failed."),F.log.warn("pnpm install failed. You can run it manually later."),!1}}async function lr(e){try{return await Qn(ei(e,".git")),F.log.info("Git repository already exists, skipping init."),!0}catch{}if(!ot("git"))return F.log.warn("git not found. Skipping repository initialization."),!1;let t=F.spinner();t.start("Initializing git repository...");try{return await it("git",["init"],e),await it("git",["add","-A"],e),await it("git",["commit","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),F.log.warn("You can run git init manually later."),!1}}import*as Ae from"@clack/prompts";import N from"picocolors";function pr(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&Ae.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let r=[];if(r.push(`cd ${e.projectDir}`),t.pnpmInstalled||r.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(s=>he[s].label).join(", ");r.push(`pnpm infra ${N.dim(`# ${o}`)}`)}if(r.push(`pnpm dev ${N.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(r.push(""),r.push(N.dim("Fill in remaining TODO values in .env"))),Ae.note(r.join(`
743
777
  `),N.yellow("Start Development")),t.dockerComposeGenerated){let o=[];o.push(`App ${N.cyan("http://localhost:3000")}`),e.architecture==="separate"&&o.push(`API ${N.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&o.push(`Mailpit ${N.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&o.push(`Inngest ${N.cyan("http://localhost:8288")}`),Ae.note(o.join(`
744
- `),N.yellow("Dev Tools"))}let i=[],n=ei(e);n.length>0&&i.push(`Set in production: ${N.dim(n.join(", "))}`),i.push("pnpm db:push # Run database migrations"),i.push(ti(e)),Ae.note(i.join(`
745
- `),N.yellow("Deployment"))}function ei(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function ti(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"cloudflare":return"wrangler deploy # Deploy to Cloudflare Workers";case"vercel":return"vercel deploy # Deploy to Vercel"}}function dr(e){let t={};if(e.name!==void 0){if(!We(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0&&(t.frontend=e.frontend),e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=vt(e.docker,Be,"docker service")),e.aiTools!==void 0&&(t.aiTools=vt(e.aiTools,Ge,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=vt(e.socialProviders,qe,"social provider")),e.currency!==void 0){if(!oe.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${oe.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!se.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${se.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!ae.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${ae.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!ce.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${ce.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let r=e.baseUrl.trim();if(r==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let i;try{i=new URL(r)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(i.protocol!=="http:"&&i.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${i.protocol}//${i.host}`}return t}var ee={projectName:"my-saas",frontend:"nuxt",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function mr(e){let t=e.projectName??ee.projectName,r=e.projectDir??`./${t}`,i=e.appName??Ye(t),n=e.deploymentTarget??ee.deploymentTarget,o=K[n]?.edgeRuntime??!1,s=e.databaseProvider??(o?"neon":ee.databaseProvider),a=e.cacheProvider??(o?"upstash":ee.cacheProvider),p=e.emailProvider??(o?"resend":ee.emailProvider),S=e.dockerServices??(o?ee.dockerServices.filter(g=>g!=="postgres"&&g!=="redis"):ee.dockerServices),h={...ee,...e,projectName:t,appName:i,projectDir:r,deploymentTarget:n,databaseProvider:s,cacheProvider:a,emailProvider:p,dockerServices:S};h.paymentProvider==="none"&&(h.credits=!1);for(let g of ke){if(h.deploymentTarget!==g.target)continue;let E=h.databaseProvider===g.provider?"database":"cache";if(h.databaseProvider===g.provider||h.cacheProvider===g.provider)throw new Error(`Incompatible: --deploy ${g.target} + --${E} ${g.provider}. ${g.reason}`)}for(let g of Me)if(h.architecture===g.architecture&&h.deploymentTarget===g.target)throw new Error(`Incompatible: --architecture ${g.architecture} + --deploy ${g.target}. ${g.reason}`);return h}function vt(e,t,r){if(e.trim()==="")return[];let i=e.split(",").map(o=>o.trim()).filter(Boolean),n=i.filter(o=>!t.includes(o));if(n.length>0)throw new Error(`Invalid ${r}(s): ${n.join(", ")}. Valid values: ${t.join(", ")}`);return i}import ai from"picocolors";var ci="c81635e3715dc7274f33a745e24a394d93d3d081a4004408585c3de86e1aac35";function li(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function gr(e){e.command("init").description("Scaffold a new GenerateSaaS project").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new W("--architecture <type>","fullstack or separate").choices([...Fe])).addOption(new W("--payment <provider>","payment provider").choices([...ze])).addOption(new W("--email <provider>","email provider").choices([...Ke])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new W("--billing-scope <scope>","billing scope (requires --org)").choices([...He])).option("--blog","enable blog").option("--no-blog","disable blog").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new W("--currency <code>","default currency for billing").choices([...oe])).addOption(new W("--deploy <target>","deployment target").choices([...se])).addOption(new W("--database <provider>","database provider").choices([...ae])).addOption(new W("--cache <provider>","cache provider").choices([...ce])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) \u2014 bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new W("--demo","first-party demo build: keep sample content, mark site non-indexable \u2014 requires CI API key").hideHelp()).action(async t=>{await pi(t)})}async function pi(e){let t=performance.now();It("0.17.0");let r,i;try{r=dr(e),i=li(e.templateVersion)}catch(y){_.cancel(I(y)),process.exit(1)}let n=_.spinner(),o;try{o=await he({apiKey:e.apiKey,prompt:!e.yes})}catch(y){_.cancel(I(y)),process.exit(1)}e.demo&&mt(o)!==ci&&(_.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let s=L(o),a=async()=>{let y=await V(s),P=y.latest,fe=i??P;if(i&&!y.versions.some(ge=>ge.version===fe))throw new Error(`Template version "${i}" is not available.`);return{latestVersion:P,selectedVersion:fe}};n.start("Verifying access...");let p,S;try{({latestVersion:p,selectedVersion:S}=await a()),n.stop("Access verified."),q(o)}catch(y){if(n.stop("Access verification failed."),y instanceof R&&y.status===401){e.yes&&(_.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),_.log.warning("Invalid API key."),o=await Y(),s=L(o),n.start("Verifying access...");try{({latestVersion:p,selectedVersion:S}=await a()),n.stop("Access verified."),q(o)}catch(P){n.stop("Access verification failed."),_.cancel(P instanceof R&&P.status===401?"Invalid API key.":I(P)),process.exit(1)}}else _.cancel(I(y)),process.exit(1)}_.log.success(`Latest version: ${p}`),S!==p&&_.log.success(`Using template version: ${S}`);let h;n.start("Activating license...");try{let y=crypto.randomUUID();h={token:(await xt(s,{frontend:"nuxt",version:S,installId:y})).token,keyHash:mt(o),installId:y},n.stop("License activated.")}catch(y){n.stop("License activation failed."),_.cancel(I(y)),process.exit(1)}let g;e.yes?g=mr(r):g=await bt(r);let E=si(g.projectDir);if(ur(E)&&ri(E).length>0)if(e.yes)_.log.info(`Directory ${E} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let P=await _.select({message:`Directory ${E} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(_.isCancel(P)||P==="cancel")&&(_.cancel("Setup cancelled."),process.exit(0)),P==="overwrite"&&ni(E,{recursive:!0,force:!0})}let v={...g,projectDir:E,version:S};n.start("Downloading template...");try{await Oe(s,S,E);let y=await De(E);await d(fr(E,Xe),JSON.stringify(y,null," ")+`
746
- `),await ir(E,E),e.demo||await Pt(E),n.stop("Template downloaded.")}catch(y){n.stop("Download failed."),_.cancel(I(y)),process.exit(1)}let D;n.start("Generating project files...");try{await Ut(v),e.demo||await tr(v),await Kt(v),D=await Mt(v),await rr(v),await Ft(v),await Vt(v),await $t(v),await Zt(v),await ar(E,v.aiTools),await Yt(v),await Jt(v),await Xt(v),await er(v),di(v),await Ht(v,h),n.stop("Project files generated.")}catch(y){n.stop("Generation failed."),_.cancel(I(y)),process.exit(1)}let ue=await cr(E);await lr(E);let te=ot("docker"),J=ct(v).map(y=>y.key).filter(y=>!v.credentials?.[y]);pr(v,{pnpmInstalled:ue,dockerComposeGenerated:D,dockerAvailable:te,skippedCredentials:J}),At(),_.log.info(ai.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}function di(e){let t=fr(e.projectDir,"apps/backend/wrangler.toml");if(!ur(t))return;let r=ii(t,"utf-8");oi(t,r.replaceAll("your-project",e.projectName))}import{existsSync as yr}from"fs";import{readFile as mi}from"fs/promises";import{join as Le,resolve as ui}from"path";import*as w from"@clack/prompts";import we from"picocolors";function hr(e){e.command("update").description("Update AI skill files and stage template updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=ui(t.cwd??process.cwd()),i=Le(r,X),n;try{n=JSON.parse(await mi(i,"utf-8"))}catch{w.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o;try{o=await he()}catch(p){w.cancel(I(p)),process.exit(1)}let s=L(o),a=w.spinner();try{a.start("Verifying access...");let p;try{p=await V(s)}catch(b){if(b instanceof R&&b.status===401)a.stop("Invalid API key."),o=await Y(),s=L(o),a.start("Verifying access..."),p=await V(s);else throw b}a.stop("Access verified."),q(o),a.start("Fetching latest skill files...");let S=await Dt(s,p.latest);await ht(r,S.skillMd,S.scripts,n.aiTools);let h=yt(n.aiTools);if(a.stop("Skills updated."),w.log.success(`Skill files installed to ${we.cyan(h.length.toString())} locations.`),n.licenseToken)try{let b=await Lt(s,{currentToken:n.licenseToken,newVersion:n.version});n.licenseToken=b.token,await d(i,JSON.stringify(n,null," ")+`
747
- `),w.log.success("License refreshed.")}catch{w.log.warn("License refresh skipped.")}if(n.version===p.latest){w.log.info(`Already on the latest version (${n.version}).`);return}let g=Le(r,kt);a.start(`Downloading v${p.latest} template...`),await Oe(s,p.latest,g),a.stop("Template staged.");let E=await Ct(s,p.latest);E&&w.note(E,`Changelog v${p.latest}`);let v=Le(r,Xe),D=Le(r,Ze),ue=!yr(D),te=!yr(v);if(ue){if(a.start("Downloading baseline template (one-time migration)..."),await Oe(s,n.version,D),te){let b=await De(D);await d(v,JSON.stringify(b,null," ")+`
748
- `)}a.stop("Baseline template stored.")}else if(te){a.start("Computing baseline template hashes...");let b=await De(D);await d(v,JSON.stringify(b,null," ")+`
749
- `),a.stop("Baseline hashes computed.")}if(await d(Le(r,Ot),JSON.stringify({currentVersion:n.version,targetVersion:p.latest,changelog:E,stagedAt:new Date().toISOString()},null," ")+`
750
- `),w.log.info(`Update staged: ${we.cyan(n.version)} \u2192 ${we.cyan(p.latest)}`),n.aiTools&&n.aiTools.length>0){let b=n.aiTools[0],J=Re[b].label;w.log.info(`Open your project in ${we.cyan(J)} and ask: ${we.cyan("'update my GenerateSaaS project'")}`)}else w.log.info(`Ask your AI coding assistant to ${we.cyan("'update my GenerateSaaS project'")}.`)}catch(p){a.stop("Failed."),w.cancel(`Update failed: ${I(p)}`),process.exit(1)}})}import*as $ from"@clack/prompts";import j from"picocolors";import{readFile as fi}from"fs/promises";import{join as gi,resolve as yi}from"path";function vr(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=yi(t.cwd??process.cwd()),i=gi(r,X),n;try{n=JSON.parse(await fi(i,"utf-8"))}catch{$.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o=[`Version: ${j.cyan(n.version)}`,`Frontend: ${j.cyan(n.frontend)}`,n.deploymentTarget?`Deploy target: ${j.cyan(n.deploymentTarget)}`:null,n.databaseProvider?`Database: ${j.cyan(n.databaseProvider)}`:null,n.cacheProvider?`Cache: ${j.cyan(n.cacheProvider)}`:null,n.aiTools&&n.aiTools.length>0?`AI tools: ${j.cyan(n.aiTools.join(", "))}`:null].filter(Boolean).join(`
751
- `);$.note(o,j.bold("Project Status"));let s=$.spinner();s.start("Checking for updates...");try{let a=await he(),p=L(a),S;try{S=await V(p)}catch(g){if(g instanceof R&&g.status===401)s.stop("Invalid API key."),a=await Y(),p=L(a),s.start("Checking for updates..."),S=await V(p),q(a);else throw g}let h=S.latest;n.version===h?(s.stop("Up to date."),$.log.success(`Already on the latest version (${j.green(h)})`)):(s.stop("Update available."),$.log.warning(`Update available: ${j.yellow(n.version)} \u2192 ${j.green(h)}`),$.log.info(`Run ${j.cyan("generatesaas update")} to update skill files, then ask your AI assistant to apply the update.`))}catch(a){s.stop("Check failed."),$.log.warning(`Could not check for updates: ${I(a)}`)}})}import{readFile as hi}from"fs/promises";import*as O from"@clack/prompts";import z from"picocolors";function vi(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let r=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(r)}function Et(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function Er(e){O.note([`License ID: ${z.cyan(String(e.lid??"unknown"))}`,`Version: ${z.cyan(String(e.ver??"unknown"))}`,`Init version: ${String(e.iver??"unknown")}`,`Frontend: ${String(e.fe??"unknown")}`,`Created: ${Et(e.pat)}`,`Last updated: ${Et(e.uat)}`,`Expires: ${Et(e.exp)}`,`Install ID: ${String(e.nid??"unknown")}`].join(`
752
- `),z.yellow("License Details"))}async function Sr(e){let t=O.spinner(),r=e.replace(/\/+$/,"");t.start(`Checking ${r}/license...`);let i;try{let o=await fetch(`${r}/license`);if(!o.ok)return t.stop(`${z.red("Not found")} \u2014 ${r}/license returned ${o.status}`),!1;if(i=await o.text(),!i||i.split(".").length!==3)return t.stop(`${z.red("Invalid")} \u2014 response is not a JWT`),!1;t.stop(`${z.green("Found")} \u2014 license endpoint responded`)}catch(o){return t.stop(`${z.red("Failed")} \u2014 ${I(o)}`),!1}let n;try{n=vi(i)}catch{return O.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let o=process.env.GENERATESAAS_API_URL??Je,s=await Nt(o,i);if(s.valid)t.stop(`${z.green("Valid")} \u2014 signature verified`);else return t.stop(`${z.red("Invalid")} \u2014 ${s.reason}`),!1}catch{return t.stop(`${z.yellow("Skipped")} \u2014 could not reach verification service`),O.log.warn("Signature not verified. Displaying unverified claims:"),Er(n),!1}return Er(n),!0}function _r(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,r)=>{if(!t&&!r.file&&(O.cancel("Provide a URL or --file <path>."),process.exit(1)),r.file){let n=(await hi(r.file,"utf-8")).split(`
753
- `).map(s=>s.trim()).filter(s=>s&&!s.startsWith("#"));n.length===0&&(O.cancel("No URLs found in file."),process.exit(1));let o=0;for(let s of n)await Sr(s)&&o++,O.log.info("");O.log.success(`${o}/${n.length} sites verified.`)}else await Sr(t)||process.exit(1)})}import{existsSync as Ei,rmSync as Si}from"fs";import*as U from"@clack/prompts";function Tr(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Ei(H)?(Si(H),U.log.success("API key removed.")):U.log.info("No API key configured.");return}let r=lt();r?U.log.info(`Current API key: ****${r.slice(-4)}`):U.log.info("No API key configured.");let i=await Y(),n=L(i),o=U.spinner();o.start("Verifying API key...");try{await V(n),o.stop("API key verified."),q(i),U.log.success("API key saved.")}catch(s){o.stop("Verification failed."),s instanceof R&&s.status===401?U.cancel("Invalid API key."):U.cancel(I(s)),process.exit(1)}})}import{existsSync as st,rmSync as _i,readFileSync as _t,writeFileSync as Ir}from"fs";import{join as de}from"path";import*as C from"@clack/prompts";var Ti=["packages/api/src/functions/license-heartbeat.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Ii=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/license-heartbeat.js";
778
+ `),N.yellow("Dev Tools"))}let i=[],n=ti(e);n.length>0&&i.push(`Set in production: ${N.dim(n.join(", "))}`),i.push("pnpm db:push # Run database migrations"),i.push(ri(e)),Ae.note(i.join(`
779
+ `),N.yellow("Deployment"))}function ti(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function ri(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"cloudflare":return"wrangler deploy # Deploy to Cloudflare Workers";case"vercel":return"vercel deploy # Deploy to Vercel"}}function dr(e){let t={};if(e.name!==void 0){if(!Xe(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0&&(t.frontend=e.frontend),e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=vt(e.docker,He,"docker service")),e.aiTools!==void 0&&(t.aiTools=vt(e.aiTools,qe,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=vt(e.socialProviders,We,"social provider")),e.currency!==void 0){if(!oe.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${oe.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!se.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${se.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!ae.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${ae.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!ce.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${ce.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let r=e.baseUrl.trim();if(r==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let i;try{i=new URL(r)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(i.protocol!=="http:"&&i.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${i.protocol}//${i.host}`}return t}var ee={projectName:"my-saas",frontend:"nuxt",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function mr(e){let t=e.projectName??ee.projectName,r=e.projectDir??`./${t}`,i=e.appName??Je(t),n=e.deploymentTarget??ee.deploymentTarget,o=B[n]?.edgeRuntime??!1,s=e.databaseProvider??(o?"neon":ee.databaseProvider),a=e.cacheProvider??(o?"upstash":ee.cacheProvider),p=e.emailProvider??(o?"resend":ee.emailProvider),S=e.dockerServices??(o?ee.dockerServices.filter(g=>g!=="postgres"&&g!=="redis"):ee.dockerServices),h={...ee,...e,projectName:t,appName:i,projectDir:r,deploymentTarget:n,databaseProvider:s,cacheProvider:a,emailProvider:p,dockerServices:S};h.paymentProvider==="none"&&(h.credits=!1);for(let g of ke){if(h.deploymentTarget!==g.target)continue;let E=h.databaseProvider===g.provider?"database":"cache";if(h.databaseProvider===g.provider||h.cacheProvider===g.provider)throw new Error(`Incompatible: --deploy ${g.target} + --${E} ${g.provider}. ${g.reason}`)}for(let g of ze)if(h.architecture===g.architecture&&h.deploymentTarget===g.target)throw new Error(`Incompatible: --architecture ${g.architecture} + --deploy ${g.target}. ${g.reason}`);return h}function vt(e,t,r){if(e.trim()==="")return[];let i=e.split(",").map(o=>o.trim()).filter(Boolean),n=i.filter(o=>!t.includes(o));if(n.length>0)throw new Error(`Invalid ${r}(s): ${n.join(", ")}. Valid values: ${t.join(", ")}`);return i}import ci from"picocolors";var li="c81635e3715dc7274f33a745e24a394d93d3d081a4004408585c3de86e1aac35";function pi(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function gr(e){e.command("init").description("Scaffold a new GenerateSaaS project").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new W("--architecture <type>","fullstack or separate").choices([...Be])).addOption(new W("--payment <provider>","payment provider").choices([...Ke])).addOption(new W("--email <provider>","email provider").choices([...Ge])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new W("--billing-scope <scope>","billing scope (requires --org)").choices([...Ye])).option("--blog","enable blog").option("--no-blog","disable blog").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new W("--currency <code>","default currency for billing").choices([...oe])).addOption(new W("--deploy <target>","deployment target").choices([...se])).addOption(new W("--database <provider>","database provider").choices([...ae])).addOption(new W("--cache <provider>","cache provider").choices([...ce])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) \u2014 bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new W("--demo","first-party demo build: keep sample content, mark site non-indexable \u2014 requires CI API key").hideHelp()).action(async t=>{await di(t)})}async function di(e){let t=performance.now();_t("0.17.2");let r,i;try{r=dr(e),i=pi(e.templateVersion)}catch(y){I.cancel(_(y)),process.exit(1)}let n=I.spinner(),o;try{o=await ve({apiKey:e.apiKey,prompt:!e.yes})}catch(y){I.cancel(_(y)),process.exit(1)}e.demo&&mt(o)!==li&&(I.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let s=L(o),a=async()=>{let y=await V(s),P=y.latest,ge=i??P;if(i&&!y.versions.some(ye=>ye.version===ge))throw new Error(`Template version "${i}" is not available.`);return{latestVersion:P,selectedVersion:ge}};n.start("Verifying access...");let p,S;try{({latestVersion:p,selectedVersion:S}=await a()),n.stop("Access verified."),q(o)}catch(y){if(n.stop("Access verification failed."),y instanceof R&&y.status===401){e.yes&&(I.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),I.log.warning("Invalid API key."),o=await Y(),s=L(o),n.start("Verifying access...");try{({latestVersion:p,selectedVersion:S}=await a()),n.stop("Access verified."),q(o)}catch(P){n.stop("Access verification failed."),I.cancel(P instanceof R&&P.status===401?"Invalid API key.":_(P)),process.exit(1)}}else I.cancel(_(y)),process.exit(1)}I.log.success(`Latest version: ${p}`),S!==p&&I.log.success(`Using template version: ${S}`);let h;n.start("Activating license...");try{let y=crypto.randomUUID();h={token:(await xt(s,{frontend:"nuxt",version:S,installId:y})).token,keyHash:mt(o),installId:y},n.stop("License activated.")}catch(y){n.stop("License activation failed."),I.cancel(_(y)),process.exit(1)}let g;e.yes?g=mr(r):g=await bt(r);let E=ai(g.projectDir);if(ur(E)&&ni(E).length>0)if(e.yes)I.log.info(`Directory ${E} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let P=await I.select({message:`Directory ${E} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(I.isCancel(P)||P==="cancel")&&(I.cancel("Setup cancelled."),process.exit(0)),P==="overwrite"&&ii(E,{recursive:!0,force:!0})}let v={...g,projectDir:E,version:S};n.start("Downloading template...");try{await Oe(s,S,E);let y=await Le(E);await d(fr(E,Qe),JSON.stringify(y,null," ")+`
780
+ `),await ir(E,E),e.demo||await Pt(E),n.stop("Template downloaded.")}catch(y){n.stop("Download failed."),I.cancel(_(y)),process.exit(1)}let D;n.start("Generating project files...");try{await Ut(v),e.demo||await tr(v),await Bt(v),D=await Mt(v),await rr(v),await Ft(v),await Vt(v),await $t(v),await Zt(v),await ar(E,v.aiTools),await Yt(v),await Jt(v),await Xt(v),await er(v),mi(v),await Ht(v,h),n.stop("Project files generated.")}catch(y){n.stop("Generation failed."),I.cancel(_(y)),process.exit(1)}let fe=await cr(E);await lr(E);let te=ot("docker"),J=ct(v).map(y=>y.key).filter(y=>!v.credentials?.[y]);pr(v,{pnpmInstalled:fe,dockerComposeGenerated:D,dockerAvailable:te,skippedCredentials:J}),At(),I.log.info(ci.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}function mi(e){let t=fr(e.projectDir,"apps/backend/wrangler.toml");if(!ur(t))return;let r=oi(t,"utf-8");si(t,r.replaceAll("your-project",e.projectName))}import{existsSync as yr}from"fs";import{readFile as ui}from"fs/promises";import{join as je,resolve as fi}from"path";import*as w from"@clack/prompts";import we from"picocolors";function hr(e){e.command("update").description("Update AI skill files and stage template updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=fi(t.cwd??process.cwd()),i=je(r,X),n;try{n=JSON.parse(await ui(i,"utf-8"))}catch{w.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o;try{o=await ve()}catch(p){w.cancel(_(p)),process.exit(1)}let s=L(o),a=w.spinner();try{a.start("Verifying access...");let p;try{p=await V(s)}catch(b){if(b instanceof R&&b.status===401)a.stop("Invalid API key."),o=await Y(),s=L(o),a.start("Verifying access..."),p=await V(s);else throw b}a.stop("Access verified."),q(o),a.start("Fetching latest skill files...");let S=await Dt(s,p.latest);await ht(r,S.skillMd,S.scripts,n.aiTools);let h=yt(n.aiTools);if(a.stop("Skills updated."),w.log.success(`Skill files installed to ${we.cyan(h.length.toString())} locations.`),n.licenseToken)try{let b=await Lt(s,{currentToken:n.licenseToken,newVersion:n.version});n.licenseToken=b.token,await d(i,JSON.stringify(n,null," ")+`
781
+ `),w.log.success("License refreshed.")}catch{w.log.warn("License refresh skipped.")}if(n.version===p.latest){w.log.info(`Already on the latest version (${n.version}).`);return}let g=je(r,kt);a.start(`Downloading v${p.latest} template...`),await Oe(s,p.latest,g),a.stop("Template staged.");let E=await Ct(s,p.latest);E&&w.note(E,`Changelog v${p.latest}`);let v=je(r,Qe),D=je(r,et),fe=!yr(D),te=!yr(v);if(fe){if(a.start("Downloading baseline template (one-time migration)..."),await Oe(s,n.version,D),te){let b=await Le(D);await d(v,JSON.stringify(b,null," ")+`
782
+ `)}a.stop("Baseline template stored.")}else if(te){a.start("Computing baseline template hashes...");let b=await Le(D);await d(v,JSON.stringify(b,null," ")+`
783
+ `),a.stop("Baseline hashes computed.")}if(await d(je(r,Ot),JSON.stringify({currentVersion:n.version,targetVersion:p.latest,changelog:E,stagedAt:new Date().toISOString()},null," ")+`
784
+ `),w.log.info(`Update staged: ${we.cyan(n.version)} \u2192 ${we.cyan(p.latest)}`),n.aiTools&&n.aiTools.length>0){let b=n.aiTools[0],J=Re[b].label;w.log.info(`Open your project in ${we.cyan(J)} and ask: ${we.cyan("'update my GenerateSaaS project'")}`)}else w.log.info(`Ask your AI coding assistant to ${we.cyan("'update my GenerateSaaS project'")}.`)}catch(p){a.stop("Failed."),w.cancel(`Update failed: ${_(p)}`),process.exit(1)}})}import*as $ from"@clack/prompts";import j from"picocolors";import{readFile as gi}from"fs/promises";import{join as yi,resolve as hi}from"path";function vr(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=hi(t.cwd??process.cwd()),i=yi(r,X),n;try{n=JSON.parse(await gi(i,"utf-8"))}catch{$.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o=[`Version: ${j.cyan(n.version)}`,`Frontend: ${j.cyan(n.frontend)}`,n.deploymentTarget?`Deploy target: ${j.cyan(n.deploymentTarget)}`:null,n.databaseProvider?`Database: ${j.cyan(n.databaseProvider)}`:null,n.cacheProvider?`Cache: ${j.cyan(n.cacheProvider)}`:null,n.aiTools&&n.aiTools.length>0?`AI tools: ${j.cyan(n.aiTools.join(", "))}`:null].filter(Boolean).join(`
785
+ `);$.note(o,j.bold("Project Status"));let s=$.spinner();s.start("Checking for updates...");try{let a=await ve(),p=L(a),S;try{S=await V(p)}catch(g){if(g instanceof R&&g.status===401)s.stop("Invalid API key."),a=await Y(),p=L(a),s.start("Checking for updates..."),S=await V(p),q(a);else throw g}let h=S.latest;n.version===h?(s.stop("Up to date."),$.log.success(`Already on the latest version (${j.green(h)})`)):(s.stop("Update available."),$.log.warning(`Update available: ${j.yellow(n.version)} \u2192 ${j.green(h)}`),$.log.info(`Run ${j.cyan("generatesaas update")} to update skill files, then ask your AI assistant to apply the update.`))}catch(a){s.stop("Check failed."),$.log.warning(`Could not check for updates: ${_(a)}`)}})}import{readFile as vi}from"fs/promises";import*as O from"@clack/prompts";import z from"picocolors";function Ei(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let r=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(r)}function Et(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function Er(e){O.note([`License ID: ${z.cyan(String(e.lid??"unknown"))}`,`Version: ${z.cyan(String(e.ver??"unknown"))}`,`Init version: ${String(e.iver??"unknown")}`,`Frontend: ${String(e.fe??"unknown")}`,`Created: ${Et(e.pat)}`,`Last updated: ${Et(e.uat)}`,`Expires: ${Et(e.exp)}`,`Install ID: ${String(e.nid??"unknown")}`].join(`
786
+ `),z.yellow("License Details"))}async function Sr(e){let t=O.spinner(),r=e.replace(/\/+$/,"");t.start(`Checking ${r}/license...`);let i;try{let o=await fetch(`${r}/license`);if(!o.ok)return t.stop(`${z.red("Not found")} \u2014 ${r}/license returned ${o.status}`),!1;if(i=await o.text(),!i||i.split(".").length!==3)return t.stop(`${z.red("Invalid")} \u2014 response is not a JWT`),!1;t.stop(`${z.green("Found")} \u2014 license endpoint responded`)}catch(o){return t.stop(`${z.red("Failed")} \u2014 ${_(o)}`),!1}let n;try{n=Ei(i)}catch{return O.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let o=process.env.GENERATESAAS_API_URL??Ze,s=await Nt(o,i);if(s.valid)t.stop(`${z.green("Valid")} \u2014 signature verified`);else return t.stop(`${z.red("Invalid")} \u2014 ${s.reason}`),!1}catch{return t.stop(`${z.yellow("Skipped")} \u2014 could not reach verification service`),O.log.warn("Signature not verified. Displaying unverified claims:"),Er(n),!1}return Er(n),!0}function Ir(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,r)=>{if(!t&&!r.file&&(O.cancel("Provide a URL or --file <path>."),process.exit(1)),r.file){let n=(await vi(r.file,"utf-8")).split(`
787
+ `).map(s=>s.trim()).filter(s=>s&&!s.startsWith("#"));n.length===0&&(O.cancel("No URLs found in file."),process.exit(1));let o=0;for(let s of n)await Sr(s)&&o++,O.log.info("");O.log.success(`${o}/${n.length} sites verified.`)}else await Sr(t)||process.exit(1)})}import{existsSync as Si,rmSync as Ii}from"fs";import*as U from"@clack/prompts";function Tr(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Si(H)?(Ii(H),U.log.success("API key removed.")):U.log.info("No API key configured.");return}let r=lt();r?U.log.info(`Current API key: ****${r.slice(-4)}`):U.log.info("No API key configured.");let i=await Y(),n=L(i),o=U.spinner();o.start("Verifying API key...");try{await V(n),o.stop("API key verified."),q(i),U.log.success("API key saved.")}catch(s){o.stop("Verification failed."),s instanceof R&&s.status===401?U.cancel("Invalid API key."):U.cancel(_(s)),process.exit(1)}})}import{existsSync as st,rmSync as Ti,readFileSync as It,writeFileSync as _r}from"fs";import{join as me}from"path";import*as C from"@clack/prompts";var _i=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Ai=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat.js";
754
788
  `,` licenseHeartbeatFunction,
755
789
  `]},{file:"packages/api/src/routes/internal/index.ts",removals:[`import licenseRoutes from "./license.js";
756
790
  `,` .route("/license", licenseRoutes)
757
- `]}];function Ai(e){return(e&&e.length>0?e.map(r=>xe[r]):Object.values(xe)).map(r=>de(r,gt))}function St(e){return st(e)?(_i(e,{recursive:!0}),!0):!1}function wi(e,t){if(!st(e))return!1;let r=_t(e,"utf-8"),i=r;for(let n of t)i=i.replace(n,"");return i===r?!1:(Ir(e,i,"utf-8"),!0)}function bi(e){let t=de(e,".gitignore");if(!st(t))return!1;let r=_t(t,"utf-8"),i=r.split(`
791
+ `]}];function wi(e){return(e&&e.length>0?e.map(r=>Ne[r]):Object.values(Ne)).map(r=>me(r,gt))}function St(e){return st(e)?(Ti(e,{recursive:!0}),!0):!1}function bi(e,t){if(!st(e))return!1;let r=It(e,"utf-8"),i=r;for(let n of t)i=i.replace(n,"");return i===r?!1:(_r(e,i,"utf-8"),!0)}function Pi(e){let t=me(e,".gitignore");if(!st(t))return!1;let r=It(t,"utf-8"),i=r.split(`
758
792
  `).filter(n=>!n.includes(".generatesaas")).join(`
759
- `);return i===r?!1:(Ir(t,i,"utf-8"),!0)}function Ar(e){e.command("eject").description("Remove all GenerateSaaS ties \u2014 manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=de(t,X),i;try{i=JSON.parse(_t(r,"utf-8"))}catch{C.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let n=await C.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});C.isCancel(n)&&(C.cancel("Eject cancelled."),process.exit(0));let o=[],s=[];for(let a of Ai(i.aiTools))St(de(t,a))&&o.push(a);for(let a of Ti)St(de(t,a))&&o.push(a);St(de(t,x))&&o.push(x+"/");for(let a of Ii){let p=de(t,a.file);wi(p,a.removals)?s.push(a.file):st(p)&&C.log.warn(`Could not auto-modify ${a.file} \u2014 manually remove license/heartbeat references.`)}bi(t)&&s.push(".gitignore");for(let a of o)C.log.info(`Deleted ${a}`);for(let a of s)C.log.info(`Modified ${a}`);C.log.success("Ejected successfully. This project is now fully standalone.")})}var me=new Pi().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("0.17.0").addHelpText("after",`
793
+ `);return i===r?!1:(_r(t,i,"utf-8"),!0)}function Ar(e){e.command("eject").description("Remove all GenerateSaaS ties \u2014 manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=me(t,X),i;try{i=JSON.parse(It(r,"utf-8"))}catch{C.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let n=await C.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});C.isCancel(n)&&(C.cancel("Eject cancelled."),process.exit(0));let o=[],s=[];for(let a of wi(i.aiTools))St(me(t,a))&&o.push(a);for(let a of _i)St(me(t,a))&&o.push(a);St(me(t,x))&&o.push(x+"/");for(let a of Ai){let p=me(t,a.file);bi(p,a.removals)?s.push(a.file):st(p)&&C.log.warn(`Could not auto-modify ${a.file} \u2014 manually remove license/heartbeat references.`)}Pi(t)&&s.push(".gitignore");for(let a of o)C.log.info(`Deleted ${a}`);for(let a of s)C.log.info(`Modified ${a}`);C.log.success("Ejected successfully. This project is now fully standalone.")})}var ue=new Ri().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("0.17.2").addHelpText("after",`
760
794
  Examples:
761
795
  $ generatesaas init Interactive setup
762
796
  $ generatesaas init -n my-app -y Quick setup with defaults
763
797
  $ generatesaas status Check for updates
764
798
  $ generatesaas auth Set or update API key
765
- `);gr(me);hr(me);vr(me);_r(me);Tr(me);Ar(me);me.parseAsync().catch(e=>{wr.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});
799
+ `);gr(ue);hr(ue);vr(ue);Ir(ue);Tr(ue);Ar(ue);ue.parseAsync().catch(e=>{wr.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "generatesaas",
3
- "version": "0.17.0",
3
+ "version": "0.17.2",
4
4
  "type": "module",
5
5
  "description": "CLI for scaffolding and managing GenerateSaaS projects",
6
6
  "bin": {