generatesaas 0.7.0 → 0.8.0

package/dist/index.js

@@ -1,69 +1,202 @@
 #!/usr/bin/env node
-import{Command as xn}from"commander";import*as Zt from"@clack/prompts";import{existsSync as an,readdirSync as sn,rmSync as cn}from"fs";import{join as ln,resolve as pn}from"path";import{Option as Z}from"commander";import*as v from"@clack/prompts";import*as Ee from"@clack/prompts";import He from"picocolors";function rt(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";Ee.intro(He.bgYellow(He.black(t)))}function nt(){Ee.outro(He.yellow("Happy building!"))}import*as p from"@clack/prompts";import u from"picocolors";var ue={nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"},nextjs:{label:"Next.js",hint:"coming soon"}},Ie={fullstack:{label:"Fullstack",hint:"Nuxt handles API via server routes"},separate:{label:"Separate",hint:"Standalone Hono backend"}},Ae={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},we={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},be={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},ae={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},fe={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var X={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var Q={node:{label:"Node.js / Docker",hint:"self-hosted with Dockerfile",edgeRuntime:!1},cloudflare:{label:"Cloudflare Workers",hint:"edge runtime, wrangler.toml",edgeRuntime:!0},vercel:{label:"Vercel",hint:"serverless, vercel.json",edgeRuntime:!0},netlify:{label:"Netlify",hint:"serverless, netlify.toml",edgeRuntime:!0}},F={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},K={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},ge=[{target:"cloudflare",provider:"postgres",reason:"Cloudflare Workers cannot connect to self-hosted PostgreSQL. Use Neon or Supabase instead."},{target:"cloudflare",provider:"redis",reason:"Cloudflare Workers cannot connect to self-hosted Redis. Use Upstash instead."},{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."},{target:"netlify",provider:"redis",reason:"Netlify serverless cannot maintain persistent Redis connections. Consider Upstash."}],it=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];var _e=["fullstack","separate"],Pe=["stripe","polar","none"],Re=["smtp","ses","resend"],Te=["postgres","redis","inngest","mailpit"],ke=["claude-code","cursor","codex","gemini-cli","windsurf"],De=["user","organization"],ee=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],te=["node","cloudflare","vercel","netlify"],re=["postgres","neon","supabase"],ne=["redis","upstash"];function Ce(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function xe(e){return/^[a-z][a-z0-9-]*$/.test(e)}function E(e){return e instanceof Error?e.message:String(e)}function S(e){p.isCancel(e)&&(p.cancel("Setup cancelled."),process.exit(0))}function ze(e){let t=[];return e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0})),t}async function ot(e){let t=!1;p.log.info(u.bold("Project"));let r=e?.projectName??await(async()=>{t=!0;let c=await p.text({message:"Project name:",placeholder:"my-saas",validate:l=>{if(!l?.trim())return"Project name is required.";if(!xe(l))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return S(c),c})(),i=e?.appName??await(async()=>{t=!0;let c=await p.text({message:"App name:",initialValue:Ce(r),validate:l=>{if(!l?.trim())return"App name is required."}});return S(c),c})(),n=e?.projectDir??await(async()=>{t=!0;let c=await p.text({message:"Project location:",initialValue:`./${r}`});return S(c),c==="."?process.cwd():c})();e?.frontend===void 0&&p.log.info("Next.js support is coming soon.");let o=e?.frontend??await(async()=>{t=!0;let c=Object.keys(ue).filter(f=>f!=="nextjs"),l=await p.select({message:"Frontend framework:",options:c.map(f=>({value:f,label:ue[f].label,hint:ue[f].hint}))});return S(l),l})();p.log.info(u.bold("Infrastructure"));let a=e?.architecture??await(async()=>{t=!0;let c=await p.select({message:"Architecture:",options:_e.map(l=>({value:l,label:Ie[l].label,hint:Ie[l].hint}))});return S(c),c})(),s=e?.deploymentTarget??"node";if(a==="separate"&&e?.deploymentTarget===void 0){t=!0;let c=await p.select({message:"Deployment target:",options:te.map(l=>({value:l,label:Q[l].label,hint:Q[l].hint}))});S(c),s=c}let m=e?.databaseProvider??await(async()=>{t=!0;let c=re.filter(f=>!ge.some(k=>k.target===s&&k.provider===f));if(c.length===1){let f=c[0];return p.log.info(`Auto-selected ${F[f].label} (only compatible option for ${Q[s].label}).`),f}let l=await p.select({message:"Database provider:",options:c.map(f=>({value:f,label:F[f].label,hint:F[f].hint}))});return S(l),l})(),y=e?.cacheProvider??await(async()=>{t=!0;let c=ne.filter(f=>!ge.some(k=>k.target===s&&k.provider===f));if(c.length===1){let f=c[0];return p.log.info(`Auto-selected ${K[f].label} (only compatible option for ${Q[s].label}).`),f}let l=await p.select({message:"Cache provider:",options:c.map(f=>({value:f,label:K[f].label,hint:K[f].hint}))});return S(l),l})();if(a==="separate"&&Q[s].edgeRuntime){let c=it.map(l=>`  - ${l}`).join(`
-`);p.note(c,"Unavailable on edge runtime")}p.log.info(u.bold("Features"));let g=e?.paymentProvider??await(async()=>{t=!0;let c=await p.select({message:"Payment provider:",options:Pe.map(l=>({value:l,label:Ae[l].label,hint:Ae[l].hint}))});return S(c),c})(),T=e?.defaultCurrency??await(async()=>{if(g==="none")return"USD";t=!0;let c=await p.select({message:"Default currency:",options:ee.map(l=>({value:l,label:l,hint:X[l].name}))});return S(c),c})(),N=e?.emailProvider??await(async()=>{t=!0;let c=await p.select({message:"Email provider:",options:Re.map(l=>({value:l,label:we[l].label,hint:we[l].hint}))});return S(c),c})(),z=e?.multiTenancy??await(async()=>{t=!0;let c=await p.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return S(c),c})(),I=e?.billingScope??"user";if(z&&e?.billingScope===void 0){t=!0;let c=await p.select({message:"Billing scope:",options:De.map(l=>({value:l,label:be[l].label,hint:be[l].hint}))});S(c),I=c}let Y=e?.blog??await(async()=>{t=!0;let c=await p.confirm({message:"Enable blog?",initialValue:!1});return S(c),c})(),h=e?.revenueSharing??await(async()=>{t=!0;let c=await p.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return S(c),c})();p.log.info(u.bold("Tooling"));let b=e?.dockerServices??await(async()=>{t=!0;let c=[...Te].filter(_=>_!=="mailpit");N==="smtp"&&c.push("mailpit");let l=c.map(_=>({value:_,label:ae[_].label,hint:ae[_].hint})),f=l.map(_=>_.value).filter(_=>!(_==="postgres"&&(m==="neon"||m==="supabase")||_==="redis"&&y==="upstash")),k=await p.multiselect({message:"Which services should we set up in Docker for you?",options:l,initialValues:f,required:!1});return S(k),k})(),Be=e?.aiTools??await(async()=>{t=!0;let c=ke.map(f=>({value:f,label:fe[f].label})),l=await p.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return S(l),l})(),Se=ze({databaseProvider:m,cacheProvider:y,paymentProvider:g,emailProvider:N}),de={};if(Se.length>0&&t){p.log.info(u.bold("Credentials")+u.dim("  all optional \u2014 press Enter to skip, fill in .env later"));for(let c of Se)if(t=!0,c.secret){let l=await p.password({message:c.message,mask:"*"});S(l),typeof l=="string"&&l.trim()&&(de[c.key]=l.trim())}else{let l=await p.text({message:c.message,placeholder:c.placeholder});S(l),typeof l=="string"&&l.trim()&&(de[c.key]=l.trim())}}if(t){let c=[`  Name:          ${u.cyan(r)}`,`  App name:      ${u.cyan(i)}`,`  Location:      ${u.cyan(n)}`,`  Frontend:      ${u.cyan(ue[o].label)}`,`  Architecture:  ${u.cyan(Ie[a].label)}`].join(`
-`),l=[a==="separate"?`  Deploy target: ${u.cyan(Q[s].label)}`:null,`  Database:      ${u.cyan(F[m].label)}`,`  Cache:         ${u.cyan(K[y].label)}`,b.length>0?`  Docker:        ${u.cyan(b.map(me=>ae[me].label).join(", "))}`:`  Docker:        ${u.dim("none")}`].filter(Boolean).join(`
-`),f=[g!=="none"?`  Payment:       ${u.cyan(Ae[g].label)} (${T})`:`  Payment:       ${u.dim("none")}`,`  Email:         ${u.cyan(we[N].label)}`,`  Multi-tenancy: ${z?u.cyan("Yes")+` (billing: ${be[I].label})`:u.dim("No")}`,`  Blog:          ${Y?u.cyan("Yes"):u.dim("No")}`,`  Rev. sharing:  ${h?u.cyan("Yes"):u.dim("No")}`,Be.length>0?`  AI tools:      ${u.cyan(Be.map(me=>fe[me].label).join(", "))}`:`  AI tools:      ${u.dim("none")}`].join(`
-`),k=[u.bold("Project"),c,"",u.bold("Infrastructure"),l,"",u.bold("Features"),f];if(Se.length>0){let me=Se.map(tt=>{let Xt=de[tt.key]?u.green("provided"):u.dim("skipped");return`  ${tt.key}: ${Xt}`}).join(`
-`);k.push("",u.bold("Credentials"),me)}p.note(k.join(`
-`),"Summary");let _=await p.confirm({message:"Proceed with these settings?"});(p.isCancel(_)||!_)&&(p.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:i,projectDir:n,frontend:o,architecture:a,deploymentTarget:s,databaseProvider:m,cacheProvider:y,paymentProvider:g,emailProvider:N,multiTenancy:z,billingScope:I,blog:Y,revenueSharing:h,dockerServices:b,aiTools:Be,defaultCurrency:T,...Object.keys(de).length>0?{credentials:de}:{}}}import{rm as Qt}from"fs/promises";import{join as er}from"path";var tr=["apps/web-nuxt/content/en/blog","apps/web-nuxt/public/images/blog"];async function at(e){await Promise.all(tr.map(t=>Qt(er(e,t),{recursive:!0,force:!0})))}import{mkdir as dr}from"fs/promises";import{Readable as mr}from"stream";import{pipeline as ur}from"stream/promises";import{extract as fr}from"tar";import{join as se}from"path";import{homedir as rr}from"os";var Oe=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",V=".generatesaas",q=se(V,"manifest.json"),st=se(V,"hashes.json"),$e=se(V,"template-hashes.json"),ct=se(V,"staging"),lt=se(V,"staging.json"),G=se(rr(),".generatesaas");var w=class extends Error{constructor(r,i){super(i);this.status=r}name="ApiError"};function D(e){return{apiKey:e,baseUrl:Oe}}async function W(e,t,r){let i=`${e.baseUrl}${t}`,n=await fetch(i,{...r,headers:{...r?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!n.ok){let o;try{o=(await n.json()).error??`API ${n.status}: ${t}`}catch{o=`API ${n.status}: ${t}`}throw new w(n.status,o)}return n}import{existsSync as nr,readFileSync as ir,writeFileSync as or,mkdirSync as ar}from"fs";import{dirname as sr}from"path";import*as J from"@clack/prompts";function Ye(){if(!nr(G))return null;try{let e=JSON.parse(ir(G,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&J.log.warning(`Found old GitHub token in ${G}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function B(e){ar(sr(G),{recursive:!0}),or(G,JSON.stringify({apiKey:e},null,"	")+`
-`,{mode:384})}async function ce(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let r=Ye();if(r)return r;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return H()}async function H(){let e=await J.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return J.isCancel(e)&&(J.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function C(e){return await(await W(e,"/versions")).json()}async function pt(e,t){try{return await(await W(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(r){if(r instanceof w&&r.status===404)return null;throw r}}async function dt(e,t){return await(await W(e,`/skill/${encodeURIComponent(t)}`)).json()}async function mt(e,t){return await(await W(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function ut(e,t){return await(await W(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function ft(e,t){let r=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({token:t})});if(!r.ok)throw new Error(`Verification service returned ${r.status}`);return await r.json()}var cr=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".netlify",".wrangler",".devcontainer","playwright-report","test-results"]),lr=new Set(["data","mksaas",".claude",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","AGENTS.md","TODO.md","OVERVIEW.md","pnpm-lock.yaml"]),pr=["apps/cms","packages/blog","packages/cli","packages/cli-api","scripts/.env","scripts/.meta","infra/docker-compose.yml"];function Le(e){let t=e.split("/");for(let r of t)if(cr.has(r))return!0;if(lr.has(t[0]))return!0;for(let r of pr)if(e===r||e.startsWith(r+"/"))return!0;return!1}async function ye(e,t,r){let i=await W(e,`/template/${encodeURIComponent(t)}`);if(!i.body)throw new Error("Empty response body");await dr(r,{recursive:!0});let n=mr.fromWeb(i.body);await ur(n,fr({cwd:r,strip:1,filter:o=>{let a=o.replace(/^[^/]+\//,"");return a?!Le(a):!0}}))}import{mkdir as gr,writeFile as yr}from"fs/promises";import{dirname as hr}from"path";async function je(e){await gr(e,{recursive:!0})}async function d(e,t){await je(hr(e)),await yr(e,t,"utf-8")}async function gt(e){switch(e.cacheProvider){case"redis":await vr(e),await Sr(e);break;case"upstash":await Er(e),await Ir(e);break}}async function vr(e){await d(`${e.projectDir}/packages/api/src/services/redis.ts`,`import { Redis } from "ioredis";
-import { RedisStore } from "rate-limit-redis";
+import{Command as ni}from"commander";import*as pr from"@clack/prompts";import{existsSync as Ln,readdirSync as jn,rmSync as $n}from"fs";import{join as Un,resolve as Vn}from"path";import{Option as Z}from"commander";import*as S from"@clack/prompts";import*as we from"@clack/prompts";import Xe from"picocolors";function dt(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";we.intro(Xe.bgYellow(Xe.black(t)))}function mt(){we.outro(Xe.yellow("Happy building!"))}import*as d from"@clack/prompts";import f from"picocolors";var he={nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"},nextjs:{label:"Next.js",hint:"coming soon"}},Re={fullstack:{label:"Fullstack",hint:"Nuxt handles API via server routes"},separate:{label:"Separate",hint:"Standalone Hono backend"}},be={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},ke={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},De={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},pe={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},Ee={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var Q={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var K={node:{label:"Node.js / Docker",hint:"self-hosted with Dockerfile",edgeRuntime:!1},cloudflare:{label:"Cloudflare Workers",hint:"edge runtime, wrangler.toml",edgeRuntime:!0},vercel:{label:"Vercel",hint:"serverless, vercel.json",edgeRuntime:!0},netlify:{label:"Netlify",hint:"serverless, netlify.toml",edgeRuntime:!0}},z={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},G={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},ve=[{target:"cloudflare",provider:"postgres",reason:"Cloudflare Workers cannot connect to self-hosted PostgreSQL. Use Neon instead."},{target:"cloudflare",provider:"supabase",reason:"Supabase driver uses TCP sockets which are unavailable on Cloudflare Workers. Use Neon instead."},{target:"cloudflare",provider:"redis",reason:"Cloudflare Workers cannot connect to self-hosted Redis. Use Upstash instead."},{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."},{target:"netlify",provider:"redis",reason:"Netlify serverless cannot maintain persistent Redis connections. Consider Upstash."}],ut=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];var Oe=["fullstack","separate"],Ce=["stripe","polar","none"],xe=["smtp","ses","resend"],Ne=["postgres","redis","inngest","mailpit"],Le=["claude-code","cursor","codex","gemini-cli","windsurf"],je=["user","organization"],ee=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],te=["node","cloudflare","vercel","netlify"],re=["postgres","neon","supabase"],ne=["redis","upstash"];function $e(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function Ue(e){return/^[a-z][a-z0-9-]*$/.test(e)}function I(e){return e instanceof Error?e.message:String(e)}function _(e){d.isCancel(e)&&(d.cancel("Setup cancelled."),process.exit(0))}function Ze(e){let t=[];return e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0})),t}async function ft(e){let t=!1;d.log.info(f.bold("Project"));let r=e?.projectName??await(async()=>{t=!0;let c=await d.text({message:"Project name:",placeholder:"my-saas",validate:p=>{if(!p?.trim())return"Project name is required.";if(!Ue(p))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return _(c),c})(),n=e?.appName??await(async()=>{t=!0;let c=await d.text({message:"App name:",initialValue:$e(r),validate:p=>{if(!p?.trim())return"App name is required."}});return _(c),c})(),i=e?.projectDir??await(async()=>{t=!0;let c=await d.text({message:"Project location:",initialValue:`./${r}`});return _(c),c==="."?process.cwd():c})();e?.frontend===void 0&&d.log.info("Next.js support is coming soon.");let o=e?.frontend??await(async()=>{t=!0;let c=Object.keys(he).filter(h=>h!=="nextjs"),p=await d.select({message:"Frontend framework:",options:c.map(h=>({value:h,label:he[h].label,hint:he[h].hint}))});return _(p),p})();d.log.info(f.bold("Infrastructure"));let s=e?.architecture??await(async()=>{t=!0;let c=await d.select({message:"Architecture:",options:Oe.map(p=>({value:p,label:Re[p].label,hint:Re[p].hint}))});return _(c),c})(),a=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){t=!0;let c=await d.select({message:"Deployment target:",options:te.map(p=>({value:p,label:K[p].label,hint:K[p].hint}))});_(c),a=c}let m=e?.databaseProvider??await(async()=>{t=!0;let c=re.filter(h=>!ve.some(k=>k.target===a&&k.provider===h));if(c.length===1){let h=c[0];return d.log.info(`Auto-selected ${z[h].label} (only compatible option for ${K[a].label}).`),h}let p=await d.select({message:"Database provider:",options:c.map(h=>({value:h,label:z[h].label,hint:z[h].hint}))});return _(p),p})(),g=e?.cacheProvider??await(async()=>{t=!0;let c=ne.filter(h=>!ve.some(k=>k.target===a&&k.provider===h));if(c.length===1){let h=c[0];return d.log.info(`Auto-selected ${G[h].label} (only compatible option for ${K[a].label}).`),h}let p=await d.select({message:"Cache provider:",options:c.map(h=>({value:h,label:G[h].label,hint:G[h].hint}))});return _(p),p})();if(K[a]?.edgeRuntime){let c=ut.map(p=>`  - ${p}`).join(`
+`);d.note(c,"Unavailable on edge runtime")}d.log.info(f.bold("Features"));let u=e?.paymentProvider??await(async()=>{t=!0;let c=await d.select({message:"Payment provider:",options:Ce.map(p=>({value:p,label:be[p].label,hint:be[p].hint}))});return _(c),c})(),E=e?.defaultCurrency??await(async()=>{if(u==="none")return"USD";t=!0;let c=await d.select({message:"Default currency:",options:ee.map(p=>({value:p,label:p,hint:Q[p].name}))});return _(c),c})(),w=e?.emailProvider??await(async()=>{t=!0;let c=await d.select({message:"Email provider:",options:xe.map(p=>({value:p,label:ke[p].label,hint:ke[p].hint}))});return _(c),c})(),M=e?.multiTenancy??await(async()=>{t=!0;let c=await d.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return _(c),c})(),F=e?.billingScope??"user";if(M&&e?.billingScope===void 0){t=!0;let c=await d.select({message:"Billing scope:",options:je.map(p=>({value:p,label:De[p].label,hint:De[p].hint}))});_(c),F=c}let ce=e?.blog??await(async()=>{t=!0;let c=await d.confirm({message:"Enable blog?",initialValue:!1});return _(c),c})(),y=e?.revenueSharing??await(async()=>{t=!0;let c=await d.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return _(c),c})();d.log.info(f.bold("Tooling"));let v=e?.dockerServices??await(async()=>{t=!0;let c=[...Ne].filter(T=>T!=="mailpit");w==="smtp"&&c.push("mailpit");let p=c.map(T=>({value:T,label:pe[T].label,hint:pe[T].hint})),h=p.map(T=>T.value).filter(T=>!(T==="postgres"&&(m==="neon"||m==="supabase")||T==="redis"&&g==="upstash")),k=await d.multiselect({message:"Which services should we set up in Docker for you?",options:p,initialValues:h,required:!1});return _(k),k})(),fe=e?.aiTools??await(async()=>{t=!0;let c=Le.map(h=>({value:h,label:Ee[h].label})),p=await d.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return _(p),p})(),Te=Ze({databaseProvider:m,cacheProvider:g,paymentProvider:u,emailProvider:w}),ge={};if(Te.length>0&&t){d.log.info(f.bold("Credentials")+f.dim("  all optional \u2014 press Enter to skip, fill in .env later"));for(let c of Te)if(t=!0,c.secret){let p=await d.password({message:c.message,mask:"*"});_(p),typeof p=="string"&&p.trim()&&(ge[c.key]=p.trim())}else{let p=await d.text({message:c.message,placeholder:c.placeholder});_(p),typeof p=="string"&&p.trim()&&(ge[c.key]=p.trim())}}if(t){let c=[`  Name:          ${f.cyan(r)}`,`  App name:      ${f.cyan(n)}`,`  Location:      ${f.cyan(i)}`,`  Frontend:      ${f.cyan(he[o].label)}`,`  Architecture:  ${f.cyan(Re[s].label)}`].join(`
+`),p=[`  Deploy target: ${f.cyan(K[a]?.label??"Node.js / Docker")}`,`  Database:      ${f.cyan(z[m].label)}`,`  Cache:         ${f.cyan(G[g].label)}`,v.length>0?`  Docker:        ${f.cyan(v.map(ye=>pe[ye].label).join(", "))}`:`  Docker:        ${f.dim("none")}`].filter(Boolean).join(`
+`),h=[u!=="none"?`  Payment:       ${f.cyan(be[u].label)} (${E})`:`  Payment:       ${f.dim("none")}`,`  Email:         ${f.cyan(ke[w].label)}`,`  Multi-tenancy: ${M?f.cyan("Yes")+` (billing: ${De[F].label})`:f.dim("No")}`,`  Blog:          ${ce?f.cyan("Yes"):f.dim("No")}`,`  Rev. sharing:  ${y?f.cyan("Yes"):f.dim("No")}`,fe.length>0?`  AI tools:      ${f.cyan(fe.map(ye=>Ee[ye].label).join(", "))}`:`  AI tools:      ${f.dim("none")}`].join(`
+`),k=[f.bold("Project"),c,"",f.bold("Infrastructure"),p,"",f.bold("Features"),h];if(Te.length>0){let ye=Te.map(lt=>{let lr=ge[lt.key]?f.green("provided"):f.dim("skipped");return`  ${lt.key}: ${lr}`}).join(`
+`);k.push("",f.bold("Credentials"),ye)}d.note(k.join(`
+`),"Summary");let T=await d.confirm({message:"Proceed with these settings?"});(d.isCancel(T)||!T)&&(d.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:n,projectDir:i,frontend:o,architecture:s,deploymentTarget:a,databaseProvider:m,cacheProvider:g,paymentProvider:u,emailProvider:w,multiTenancy:M,billingScope:F,blog:ce,revenueSharing:y,dockerServices:v,aiTools:fe,defaultCurrency:E,...Object.keys(ge).length>0?{credentials:ge}:{}}}import{rm as dr}from"fs/promises";import{join as mr}from"path";var ur=["apps/web-nuxt/content/en/blog","apps/web-nuxt/public/images/blog"];async function gt(e){await Promise.all(ur.map(t=>dr(mr(e,t),{recursive:!0,force:!0})))}import{mkdir as Ir}from"fs/promises";import{Readable as Ar}from"stream";import{pipeline as Pr}from"stream/promises";import{extract as Tr}from"tar";import{join as ie}from"path";import{homedir as fr}from"os";var Ve=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",D=".generatesaas",q=ie(D,"manifest.json"),yt=ie(D,"hashes.json"),Me=ie(D,"template-hashes.json"),Fe=ie(D,"template"),ht=ie(D,"staging"),Et=ie(D,"staging.json"),B=ie(fr(),".generatesaas");var P=class extends Error{constructor(r,n){super(n);this.status=r}name="ApiError"};function O(e){return{apiKey:e,baseUrl:Ve}}async function W(e,t,r){let n=`${e.baseUrl}${t}`,i=await fetch(n,{...r,headers:{...r?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!i.ok){let o;try{o=(await i.json()).error??`API ${i.status}: ${t}`}catch{o=`API ${i.status}: ${t}`}throw new P(i.status,o)}return i}import{existsSync as gr,readFileSync as yr,writeFileSync as hr,mkdirSync as Er}from"fs";import{dirname as vr}from"path";import*as J from"@clack/prompts";function Qe(){if(!gr(B))return null;try{let e=JSON.parse(yr(B,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&J.log.warning(`Found old GitHub token in ${B}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function H(e){Er(vr(B),{recursive:!0}),hr(B,JSON.stringify({apiKey:e},null,"	")+`
+`,{mode:384})}async function le(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let r=Qe();if(r)return r;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return Y()}async function Y(){let e=await J.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return J.isCancel(e)&&(J.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function C(e){return await(await W(e,"/versions")).json()}async function vt(e,t){try{return await(await W(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(r){if(r instanceof P&&r.status===404)return null;throw r}}async function St(e,t){return await(await W(e,`/skill/${encodeURIComponent(t)}`)).json()}async function _t(e,t){return await(await W(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function It(e,t){return await(await W(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function At(e,t){let r=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({token:t})});if(!r.ok)throw new Error(`Verification service returned ${r.status}`);return await r.json()}var et=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".netlify",".wrangler",".devcontainer","playwright-report","test-results"]),Sr=new Set(["data","mksaas",".claude",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","AGENTS.md","TODO.md","OVERVIEW.md","pnpm-lock.yaml"]),_r=["apps/cms","packages/blog","packages/cli","packages/cli-api","scripts/.env","scripts/.meta","infra/docker-compose.yml"];function de(e){let t=e.split("/");for(let r of t)if(et.has(r))return!0;if(Sr.has(t[0]))return!0;for(let r of _r)if(e===r||e.startsWith(r+"/"))return!0;return!1}async function Se(e,t,r){let n=await W(e,`/template/${encodeURIComponent(t)}`);if(!n.body)throw new Error("Empty response body");await Ir(r,{recursive:!0});let i=Ar.fromWeb(n.body);await Pr(i,Tr({cwd:r,strip:1,filter:o=>{let s=o.replace(/^[^/]+\//,"");return s?!de(s):!0}}))}import{mkdir as wr,readdir as Rr,writeFile as br}from"fs/promises";import{dirname as kr,join as Dr,relative as Or}from"path";async function Ke(e){await wr(e,{recursive:!0})}async function l(e,t){await Ke(kr(e)),await br(e,t,"utf-8")}async function oe(e,t,r){let n=[],i=await Rr(e,{withFileTypes:!0});for(let o of i){let s=Dr(e,o.name),a=Or(t,s);r(a)||(o.isDirectory()?n.push(...await oe(s,t,r)):o.isFile()&&n.push(s))}return n}async function Pt(e){switch(e.cacheProvider){case"redis":await Cr(e),await xr(e);break;case"upstash":await Nr(e),await Lr(e);break}}async function Cr(e){await l(`${e.projectDir}/packages/api/src/services/redis.ts`,`import type { Store } from "hono-rate-limiter";
+import { Redis } from "ioredis";
+import { RedisStore, type RedisReply } from "rate-limit-redis";
 import { env } from "../env.js";
 
 export const redis = new Redis(env.REDIS_URL);
 
 export const limiterStore = new RedisStore({
-	sendCommand: (...args: string[]) => redis.call(...args) as never,
-});
+	sendCommand: (command: string, ...args: string[]) =>
+		redis.call(command, ...args) as Promise<RedisReply>,
+}) as unknown as Store;
+
+let closed = false;
 
 /** Gracefully close the Redis connection. */
-export function closeRedis(): void {
-	redis.disconnect();
+export async function closeRedis() {
+	if (closed) return;
+	try {
+		await redis.quit();
+	} catch (error) {
+		redis.disconnect();
+		throw error;
+	} finally {
+		closed = true;
+	}
 }
-`)}async function Sr(e){await d(`${e.projectDir}/packages/api/src/services/mutex.ts`,`import { Mutex } from "redis-semaphore";
+`)}async function xr(e){await l(`${e.projectDir}/packages/api/src/services/mutex.ts`,`import { Mutex } from "redis-semaphore";
 import { redis } from "./redis.js";
 
-/** Acquire a distributed mutex lock. */
-export function createMutex(key: string): Mutex {
-	return new Mutex(redis, key);
+export class MutexTimeoutError extends Error {
+	constructor(key: string) {
+		super(\`Failed to acquire mutex for key: \${key}\`);
+		this.name = "MutexTimeoutError";
+	}
+}
+
+/** Execute a function while holding a distributed mutex lock. */
+export async function withMutex<T>(
+	key: string,
+	fn: () => Promise<T>,
+	options?: { lockTimeout?: number; acquireTimeout?: number }
+): Promise<T> {
+	const mutex = new Mutex(redis, key, {
+		lockTimeout: options?.lockTimeout ?? 10000,
+		acquireAttemptsLimit: 10,
+		retryInterval: 500
+	});
+
+	const acquired = await mutex.tryAcquire();
+	if (!acquired) {
+		throw new MutexTimeoutError(key);
+	}
+
+	try {
+		return await fn();
+	} finally {
+		await mutex.release();
+	}
 }
-`)}async function Er(e){await d(`${e.projectDir}/packages/api/src/services/redis.ts`,`import { Redis } from "@upstash/redis";
-import { Ratelimit } from "@upstash/ratelimit";
+`)}async function Nr(e){await l(`${e.projectDir}/packages/api/src/services/redis.ts`,`import { Redis as UpstashRedis } from "@upstash/redis";
+import type { Store } from "hono-rate-limiter";
 import { env } from "../env.js";
 
-export const redis = new Redis({
+const upstash = new UpstashRedis({
 	url: env.UPSTASH_REDIS_REST_URL,
 	token: env.UPSTASH_REDIS_REST_TOKEN,
 });
 
-/** Create a rate limiter using Upstash Ratelimit. */
-export function createRatelimit(maxRequests: number, window: string): Ratelimit {
-	return new Ratelimit({
-		redis,
-		limiter: Ratelimit.slidingWindow(maxRequests, window as Parameters<typeof Ratelimit.slidingWindow>[1]),
-	});
+/**
+ * Redis client wrapper that provides an ioredis-compatible API surface
+ * over the Upstash HTTP-based Redis client.
+ */
+export const redis = {
+	async get(key: string): Promise<string | null> {
+		return upstash.get<string>(key);
+	},
+
+	async set(key: string, value: string, ...args: unknown[]): Promise<string | null> {
+		const opts: Record<string, unknown> = {};
+		for (let i = 0; i < args.length; i++) {
+			const arg = typeof args[i] === "string" ? (args[i] as string).toUpperCase() : args[i];
+			if (arg === "EX") opts.ex = args[++i];
+			else if (arg === "PX") opts.px = args[++i];
+			else if (arg === "NX") opts.nx = true;
+			else if (arg === "XX") opts.xx = true;
+		}
+		const result = await (Object.keys(opts).length > 0
+			? upstash.set(key, value, opts)
+			: upstash.set(key, value));
+		return result as string | null;
+	},
+
+	async del(key: string): Promise<number> {
+		return upstash.del(key);
+	},
+
+	async exists(key: string): Promise<number> {
+		return upstash.exists(key);
+	},
+
+	async incr(key: string): Promise<number> {
+		return upstash.incr(key);
+	},
+
+	async expire(key: string, seconds: number): Promise<number> {
+		const ok = await upstash.expire(key, seconds);
+		return ok ? 1 : 0;
+	},
+
+	quit(): void {},
+	disconnect(): void {},
+};
+
+/**
+ * Rate-limit store compatible with hono-rate-limiter, backed by Upstash Redis.
+ * Uses atomic INCR + PEXPIRE for a simple sliding window counter.
+ */
+class UpstashRateLimitStore {
+	windowMs = 60_000;
+
+	init(options: { windowMs: number }): void {
+		this.windowMs = options.windowMs;
+	}
+
+	async increment(key: string): Promise<{ totalHits: number; resetTime: Date }> {
+		const totalHits = await upstash.incr(key);
+		if (totalHits === 1) {
+			await upstash.pexpire(key, this.windowMs);
+		}
+		const ttl = await upstash.pttl(key);
+		return {
+			totalHits,
+			resetTime: new Date(Date.now() + Math.max(0, ttl)),
+		};
+	}
+
+	async decrement(key: string): Promise<void> {
+		await upstash.decr(key);
+	}
+
+	async resetKey(key: string): Promise<void> {
+		await upstash.del(key);
+	}
 }
 
+export const limiterStore = new UpstashRateLimitStore() as unknown as Store;
+
 /** No persistent connection to close with Upstash REST. */
-export function closeRedis(): void {}
-`)}async function Ir(e){await d(`${e.projectDir}/packages/api/src/services/mutex.ts`,`import { redis } from "./redis.js";
+export async function closeRedis(): Promise<void> {}
+`)}async function Lr(e){await l(`${e.projectDir}/packages/api/src/services/mutex.ts`,`import { redis } from "./redis.js";
+
+export class MutexTimeoutError extends Error {
+	constructor(key: string) {
+		super(\`Failed to acquire mutex for key: \${key}\`);
+		this.name = "MutexTimeoutError";
+	}
+}
 
-/** Simple distributed mutex using Upstash Redis SET NX. */
-export async function withMutex<T>(key: string, ttlMs: number, fn: () => Promise<T>): Promise<T> {
+/** Execute a function while holding a distributed mutex lock (Upstash SET NX). */
+export async function withMutex<T>(
+	key: string,
+	fn: () => Promise<T>,
+	options?: { lockTimeout?: number; acquireTimeout?: number }
+): Promise<T> {
 	const lockKey = \`mutex:\${key}\`;
 	const lockValue = crypto.randomUUID();
-
-	const acquired = await redis.set(lockKey, lockValue, { nx: true, px: ttlMs });
-	if (!acquired) throw new Error(\`Could not acquire lock: \${key}\`);
-
-	try {
-		return await fn();
-	} finally {
-		const current = await redis.get(lockKey);
-		if (current === lockValue) await redis.del(lockKey);
+	const lockTimeout = options?.lockTimeout ?? 10_000;
+	const acquireTimeout = options?.acquireTimeout ?? 5_000;
+	const retryInterval = 500;
+
+	const deadline = Date.now() + acquireTimeout;
+
+	while (Date.now() < deadline) {
+		const acquired = await redis.set(lockKey, lockValue, "PX", lockTimeout, "NX");
+		if (acquired) {
+			try {
+				return await fn();
+			} finally {
+				// Safe release: only delete if we still own the lock
+				const current = await redis.get(lockKey);
+				if (current === lockValue) {
+					await redis.del(lockKey);
+				}
+			}
+		}
+		await new Promise((r) => setTimeout(r, retryInterval));
 	}
+
+	throw new MutexTimeoutError(key);
 }
-`)}async function yt(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),r=e.paymentProvider!=="none",i=`import type { AppConfig } from "../types/index.js";
+`)}async function Tt(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),r=e.paymentProvider!=="none",n=`import type { AppConfig } from "../types/index.js";
 
 export const config: AppConfig = {
 	siteName: "${t}",
@@ -162,7 +295,7 @@ export const config: AppConfig = {
 	currency: {
 		base: "${e.defaultCurrency}",
 		list: [
-			{ symbol: "${X[e.defaultCurrency].symbol}", name: "${X[e.defaultCurrency].name}", code: "${e.defaultCurrency}", place: "${X[e.defaultCurrency].place}", space: ${X[e.defaultCurrency].space} }
+			{ symbol: "${Q[e.defaultCurrency].symbol}", name: "${Q[e.defaultCurrency].name}", code: "${e.defaultCurrency}", place: "${Q[e.defaultCurrency].place}", space: ${Q[e.defaultCurrency].space} }
 		],
 		countryMap: {
 			default: "${e.defaultCurrency}"
@@ -215,7 +348,7 @@ export * from "./section-tabs.js";
 export * from "./sidebar.js";
 export * from "./tenancy.js";
 export * from "./user-menu.js";
-`,n=`${e.projectDir}/packages/core/src/config/index.ts`;await d(n,i)}async function ht(e){let t;switch(e.databaseProvider){case"postgres":t=Ar();break;case"neon":t=wr();break;case"supabase":t=br();break}await d(`${e.projectDir}/packages/db/src/index.ts`,t)}function Ar(){return`import { drizzle } from "drizzle-orm/node-postgres";
+`,i=`${e.projectDir}/packages/core/src/config/index.ts`;await l(i,n)}async function wt(e){let t;switch(e.databaseProvider){case"postgres":t=jr();break;case"neon":t=$r();break;case"supabase":t=Ur();break}await l(`${e.projectDir}/packages/db/src/index.ts`,t)}function jr(){return`import { drizzle } from "drizzle-orm/node-postgres";
 import { z } from "zod";
 import * as schema from "./db/schema.js";
 
@@ -227,7 +360,7 @@ export const pool = db.$client;
 
 export * from "./db/schema.js";
 export type { User, Account, Organization, Member } from "./db/auth.js";
-`}function wr(){return`import { neon } from "@neondatabase/serverless";
+`}function $r(){return`import { neon } from "@neondatabase/serverless";
 import { drizzle } from "drizzle-orm/neon-http";
 import { z } from "zod";
 import * as schema from "./db/schema.js";
@@ -240,7 +373,7 @@ export const db = drizzle(sql, { schema });
 
 export * from "./db/schema.js";
 export type { User, Account, Organization, Member } from "./db/auth.js";
-`}function br(){return`import { drizzle } from "drizzle-orm/postgres-js";
+`}function Ur(){return`import { drizzle } from "drizzle-orm/postgres-js";
 import postgres from "postgres";
 import { z } from "zod";
 import * as schema from "./db/schema.js";
@@ -253,7 +386,7 @@ export const db = drizzle(client, { schema });
 
 export * from "./db/schema.js";
 export type { User, Account, Organization, Member } from "./db/auth.js";
-`}async function vt(e){let t=[...e.dockerServices];if(F[e.databaseProvider].managed&&(t=t.filter(o=>o!=="postgres")),K[e.cacheProvider].managed&&(t=t.filter(o=>o!=="redis")),t.length===0)return!1;let r=[],i=[];t.includes("postgres")&&(r.push(`  postgres:
+`}async function Rt(e){let t=[...e.dockerServices];if(z[e.databaseProvider].managed&&(t=t.filter(o=>o!=="postgres")),G[e.cacheProvider].managed&&(t=t.filter(o=>o!=="redis")),t.length===0)return!1;let r=[],n=[];t.includes("postgres")&&(r.push(`  postgres:
     image: postgres:18-alpine
     ports:
       - "\${POSTGRES_PORT:-5432}:5432"
@@ -268,7 +401,7 @@ export type { User, Account, Organization, Member } from "./db/auth.js";
       test: ["CMD-SHELL", "pg_isready -U postgres"]
       interval: 5s
       timeout: 5s
-      retries: 5`),i.push("  postgres_data:")),t.includes("redis")&&(r.push(`  redis:
+      retries: 5`),n.push("  postgres_data:")),t.includes("redis")&&(r.push(`  redis:
     image: redis:8-alpine
     ports:
       - "\${REDIS_PORT:-6379}:6379"
@@ -278,7 +411,7 @@ export type { User, Account, Organization, Member } from "./db/auth.js";
       test: ["CMD", "redis-cli", "ping"]
       interval: 5s
       timeout: 5s
-      retries: 5`),i.push("  redis_data:")),t.includes("mailpit")&&r.push(`  mailpit:
+      retries: 5`),n.push("  redis_data:")),t.includes("mailpit")&&r.push(`  mailpit:
     image: axllent/mailpit
     ports:
       - "\${MAILPIT_SMTP_PORT:-1025}:1025"
@@ -289,16 +422,17 @@ export type { User, Account, Organization, Member } from "./db/auth.js";
     image: inngest/inngest:v1.17.4
     ports:
       - "\${INNGEST_PORT:-8288}:8288"
-    command: inngest dev`);let n=`services:
+    command: inngest dev`);let i=`services:
 ${r.join(`
 
 `)}
-`;return i.length>0&&(n+=`
+`;return n.length>0&&(i+=`
 volumes:
-${i.join(`
+${n.join(`
 `)}
-`),await d(`${e.projectDir}/infra/docker-compose.yml`,n),!0}async function St(e){if(e.architecture!=="separate")return;let t;switch(e.deploymentTarget){case"node":t=_r();break;case"cloudflare":t=Pr();break;case"vercel":t=Rr();break;case"netlify":t=Tr();break}await d(`${e.projectDir}/apps/backend/src/index.ts`,t)}function _r(){return`import { serve } from "@hono/node-server";
-import { app, closeRedis, env, logger } from "@repo/api";
+`),await l(`${e.projectDir}/infra/docker-compose.yml`,i),!0}async function bt(e){if(e.architecture!=="separate")return;let t;switch(e.deploymentTarget){case"node":t=Vr();break;case"cloudflare":t=Mr();break;case"vercel":t=Fr();break;case"netlify":t=Kr();break}await l(`${e.projectDir}/apps/backend/src/index.ts`,t)}function Vr(){return`import "dotenv/config";
+import { serve } from "@hono/node-server";
+import app, { closeRedis, env, logger } from "@repo/api";
 
 const server = serve(
 	{ fetch: app.fetch, port: env.API_PORT },
@@ -307,38 +441,180 @@ const server = serve(
 	},
 );
 
-function shutdown() {
+async function shutdown() {
 	server.close();
-	closeRedis();
+	await closeRedis();
 	process.exit(0);
 }
 
 process.on("SIGINT", shutdown);
 process.on("SIGTERM", shutdown);
-`}function Pr(){return`import { app } from "@repo/api";
+`}function Mr(){return`import app from "@repo/api";
 
 export default app;
-`}function Rr(){return`import { handle } from "hono/vercel";
-import { app } from "@repo/api";
+`}function Fr(){return`import { handle } from "hono/vercel";
+import app from "@repo/api";
 
 export default handle(app);
-`}function Tr(){return`import { handle } from "hono/netlify";
-import { app } from "@repo/api";
+`}function Kr(){return`import { handle } from "hono/netlify";
+import app from "@repo/api";
 
 export default handle(app);
-`}var kr={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]},Dr={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function Ne(e,t){return t?e.map(r=>{let i=t[r.key];return i?{...r,defaultValue:i,comment:void 0}:r}):e}function Ve(e,t){for(let r of e)r.comment&&t.push(r.comment),r.defaultValue!==void 0?t.push(`${r.key}=${r.defaultValue}`):t.push(`#${r.key}=`)}function Et(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function Cr(e){let t=crypto.randomUUID(),r=Et(32),i=Et(32),o=["# API Configuration",`API_URL=${e.architecture==="fullstack"?"http://localhost:3000/api":"http://localhost:3010"}`];o.push("","# Database"),Ve(Ne(F[e.databaseProvider].envVars,e.credentials),o),o.push("","# Cache"),Ve(Ne(K[e.cacheProvider].envVars,e.credentials),o),o.push("","# Authentication",`BETTER_AUTH_SECRET=${t}`,"","# Job Queue - Inngest","INNGEST_APP_ID=api",`INNGEST_EVENT_KEY=${r}`,`INNGEST_SIGNING_KEY=${i}`,"INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&o.push("","# API Port (standalone backend)","API_PORT=3010");let a=kr[e.emailProvider];if(a&&(o.push("","# Email"),Ve(Ne(a,e.credentials),o)),e.paymentProvider!=="none"){let s=Dr[e.paymentProvider];s&&(o.push("","# Payment"),Ve(Ne(s,e.credentials),o))}return o.push(""),o.join(`
-`)}function xr(e){return["# API Configuration",`NUXT_PUBLIC_API_URL=${e.architecture==="fullstack"?"http://localhost:3000/api":"http://localhost:3010"}`,""].join(`
-`)}async function It(e){let t=Cr(e),r=xr(e);if(e.architecture==="fullstack"){let i=r+`
-`+t;await d(`${e.projectDir}/apps/web-nuxt/.env`,i)}else await d(`${e.projectDir}/apps/web-nuxt/.env`,r),await d(`${e.projectDir}/apps/backend/.env`,t)}import{readdir as $r}from"fs/promises";import{join as qe,relative as bt}from"path";import{createHash as At}from"crypto";import{readFile as Or}from"fs/promises";async function Ue(e){let t=await Or(e);return At("sha256").update(t).digest("hex")}function wt(e){return At("sha256").update(e).digest("hex")}var Lr=new Set([".git","node_modules",".pnpm-store",".env","data",V]);function jr(e){let t=e.split("/");for(let r of t)if(Lr.has(r)||r.startsWith(".env")&&!r.includes("example"))return!0;return!1}async function _t(e,t){let r=[],i=await $r(e,{withFileTypes:!0});for(let n of i){let o=qe(e,n.name),a=bt(t,o);jr(a)||(n.isDirectory()?r.push(...await _t(o,t)):n.isFile()&&r.push(o))}return r}async function Pt(e,t){let i=(await _t(e.projectDir,e.projectDir)).sort(),n=await Promise.all(i.map(async s=>[bt(e.projectDir,s),await Ue(s)])),o=Object.fromEntries(n),a={version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",frontend:e.frontend,aiTools:e.aiTools,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,revenueSharing:e.revenueSharing,...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}};await d(qe(e.projectDir,q),JSON.stringify(a,null,"	")+`
-`),await d(qe(e.projectDir,st),JSON.stringify(o,null,"	")+`
-`)}async function Rt(e){if(!(e.architecture!=="separate"||e.deploymentTarget==="node"))switch(e.deploymentTarget){case"cloudflare":await Nr(e);break;case"vercel":await Vr(e);break;case"netlify":await Ur(e);break}}async function Nr(e){let t=`name = "${e.projectName}-api"
+`}var zr={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]},Gr={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function ze(e,t){return t?e.map(r=>{let n=t[r.key];return n?{...r,defaultValue:n,comment:void 0}:r}):e}function Ge(e,t){for(let r of e)r.comment&&t.push(r.comment),r.defaultValue!==void 0?t.push(`${r.key}=${r.defaultValue}`):t.push(`#${r.key}=`)}function kt(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function Br(e){let t=crypto.randomUUID(),r=kt(32),n=kt(32),o=["# API Configuration",`API_URL=${e.architecture==="fullstack"?"http://localhost:3000/api":"http://localhost:3010"}`];o.push("","# Database"),Ge(ze(z[e.databaseProvider].envVars,e.credentials),o),o.push("","# Cache"),Ge(ze(G[e.cacheProvider].envVars,e.credentials),o),o.push("","# Authentication",`BETTER_AUTH_SECRET=${t}`,"","# Job Queue - Inngest","INNGEST_APP_ID=api",`INNGEST_EVENT_KEY=${r}`,`INNGEST_SIGNING_KEY=${n}`,"INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&o.push("","# API Port (standalone backend)","API_PORT=3010");let s=zr[e.emailProvider];if(s&&(o.push("","# Email"),Ge(ze(s,e.credentials),o)),e.paymentProvider!=="none"){let a=Gr[e.paymentProvider];a&&(o.push("","# Payment"),Ge(ze(a,e.credentials),o))}return o.push(""),o.join(`
+`)}function Hr(e){return["# API Configuration",`NUXT_PUBLIC_API_URL=${e.architecture==="fullstack"?"http://localhost:3000/api":"http://localhost:3010"}`,""].join(`
+`)}async function Dt(e){let t=Br(e),r=Hr(e);if(e.architecture==="fullstack"){let n=r+`
+`+t;await l(`${e.projectDir}/apps/web-nuxt/.env`,n)}else await l(`${e.projectDir}/apps/web-nuxt/.env`,r),await l(`${e.projectDir}/apps/backend/.env`,t)}import{join as xt,relative as qr}from"path";import{createHash as Ot}from"crypto";import{readFile as Yr}from"fs/promises";async function Be(e){let t=await Yr(e);return Ot("sha256").update(t).digest("hex")}function Ct(e){return Ot("sha256").update(e).digest("hex")}var Wr=new Set(["data",D]);function Jr(e){let t=e.split("/");for(let r of t)if(et.has(r)||Wr.has(r)||r.startsWith(".env")&&!r.includes("example"))return!0;return!1}async function Nt(e,t){let n=(await oe(e.projectDir,e.projectDir,Jr)).sort(),i=await Promise.all(n.map(async a=>[qr(e.projectDir,a),await Be(a)])),o=Object.fromEntries(i),s={version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",frontend:e.frontend,aiTools:e.aiTools,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,revenueSharing:e.revenueSharing,...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}};await l(xt(e.projectDir,q),JSON.stringify(s,null,"	")+`
+`),await l(xt(e.projectDir,yt),JSON.stringify(o,null,"	")+`
+`)}import{readFile as Xr}from"fs/promises";import{join as tt}from"path";var He={"@upstash/redis":"^1.37.0","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7",wrangler:"^4.19.1"};async function rt(e){let t=await Xr(e,"utf-8");return JSON.parse(t)}async function nt(e,t){await l(e,JSON.stringify(t,null,"	")+`
+`)}function _e(e,t){for(let r of t)delete e.dependencies?.[r],delete e.devDependencies?.[r]}function Ye(e,t,r,n=!1){let i=n?"devDependencies":"dependencies";e[i]||(e[i]={}),e[i][t]=r}async function Lt(e){await Zr(e),await Qr(e),await en(e)}async function Zr(e){let t=tt(e.projectDir,"packages/api/package.json"),r=await rt(t);_e(r,["sharp","@types/sharp"]),e.cacheProvider==="upstash"&&(_e(r,["ioredis","rate-limit-redis","redis-semaphore"]),Ye(r,"@upstash/redis",He["@upstash/redis"])),await nt(t,r)}async function Qr(e){let t=tt(e.projectDir,"packages/db/package.json"),r=await rt(t);e.databaseProvider==="neon"?(_e(r,["pg","@types/pg"]),Ye(r,"@neondatabase/serverless",He["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(_e(r,["pg","@types/pg"]),Ye(r,"postgres",He.postgres)),await nt(t,r)}async function en(e){if(e.architecture!=="separate")return;let t=tt(e.projectDir,"apps/backend/package.json"),r=await rt(t);e.deploymentTarget!=="node"&&_e(r,["@hono/node-server","dotenv"]),e.deploymentTarget==="cloudflare"&&Ye(r,"wrangler",He.wrangler,!0),await nt(t,r)}async function jt(e){let r=`import { z } from "zod";
+
+const EnvSchema = z.object({
+	NODE_ENV: z.enum(["development", "production"]).default("development"),
+
+	API_PORT: z.coerce.number().int().positive().default(3010),
+	API_URL: z.preprocess(
+		(val) =>
+			val ||
+			process.env.NUXT_PUBLIC_API_URL ||
+			process.env.NEXT_PUBLIC_API_URL ||
+			process.env.PUBLIC_API_URL,
+		z.url()
+	),
+
+${e.cacheProvider==="upstash"?`	UPSTASH_REDIS_REST_URL: z.string(),
+	UPSTASH_REDIS_REST_TOKEN: z.string(),`:"	REDIS_URL: z.string(),"}
+
+	BETTER_AUTH_SECRET: z.string().min(32),
+
+	GOOGLE_CLIENT_ID: z.string().optional(),
+	GOOGLE_CLIENT_SECRET: z.string().optional(),
+
+	GITHUB_CLIENT_ID: z.string().optional(),
+	GITHUB_CLIENT_SECRET: z.string().optional(),
+
+	INNGEST_APP_ID: z.string(),
+	INNGEST_EVENT_KEY: z.string(),
+	INNGEST_BASE_URL: z.url(),
+
+	AMAZON_SES_REGION: z.string().optional(),
+	AMAZON_SES_KEY: z.string().optional(),
+	AMAZON_SES_SECRET: z.string().optional(),
+
+	RESEND_API_KEY: z.string().optional(),
+	RESEND_AUDIENCE_ID: z.string().optional(),
+
+	LISTMONK_URL: z.url().optional(),
+	LISTMONK_API_USER: z.string().optional(),
+	LISTMONK_API_TOKEN: z.string().optional(),
+	LISTMONK_LIST_ID: z.coerce.number().int().positive().optional(),
+
+	SMTP_HOST: z.string().optional(),
+	SMTP_PORT: z.coerce.number().int().positive().optional(),
+
+	TWILIO_ACCOUNT_SID: z.string().optional(),
+	TWILIO_AUTH_TOKEN: z.string().optional(),
+	TWILIO_PHONE_NUMBER: z.string().optional(),
+
+	AMAZON_SNS_REGION: z.string().optional(),
+	AMAZON_SNS_KEY: z.string().optional(),
+	AMAZON_SNS_SECRET: z.string().optional(),
+	AMAZON_SNS_SENDER_ID: z.string().optional(),
+	AMAZON_SNS_ORIGINATION_NUMBER: z.string().optional(),
+
+	STRIPE_SECRET_KEY: z.string().optional(),
+	STRIPE_WEBHOOK_SECRET: z.string().optional(),
+
+	POLAR_ACCESS_TOKEN: z.string().optional(),
+	POLAR_WEBHOOK_SECRET: z.string().optional(),
+
+	STORAGE_REGION: z.string().optional(),
+	STORAGE_ENDPOINT: z.string().optional(),
+	STORAGE_ACCESS_KEY_ID: z.string().optional(),
+	STORAGE_SECRET_ACCESS_KEY: z.string().optional(),
+	STORAGE_BUCKET_NAME: z.string().optional(),
+	STORAGE_PUBLIC_URL: z.string().optional(),
+	STORAGE_FORCE_PATH_STYLE: z
+		.string()
+		.optional()
+		.transform((val) => val === "true"),
+
+	STORAGE_LOCAL_PATH: z.string().optional(),
+	STORAGE_LOCAL_PUBLIC_URL: z.string().optional(),
+
+	DISCORD_WEBHOOK_URL: z.url().optional(),
+	SLACK_WEBHOOK_URL: z.url().optional(),
+	TELEGRAM_BOT_TOKEN: z
+		.string()
+		.regex(/^\\d+:[A-Za-z0-9_-]+$/, "Invalid Telegram bot token format")
+		.optional(),
+	TELEGRAM_CHAT_ID: z.string().optional(),
+	TELEGRAM_TOPIC_ID: z.string().optional(),
+
+	TURNSTILE_SECRET_KEY: z.string().optional(),
+
+	CONTENT_API_KEY: z.string().min(16).optional()
+});
+
+export const env = (() => {
+	const parsed = EnvSchema.safeParse(process.env);
+
+	if (!parsed.success) {
+		const message = parsed.error.issues
+			.map((issue) => \`\${issue.path.join(".") || "unknown"}: \${issue.message}\`)
+			.join(", ");
+		throw new Error(\`Invalid api package environment: \${message}\`);
+	}
+	return parsed.data;
+})();
+
+const parsedApiUrl = new URL(env.API_URL);
+export const apiBasePath = parsedApiUrl.pathname === "/" ? "" : parsedApiUrl.pathname;
+export const apiOrigin = parsedApiUrl.origin;
+`;await l(`${e.projectDir}/packages/api/src/env.ts`,r)}import{readFile as tn}from"fs/promises";import{join as rn}from"path";var nn={cloudflare:"cloudflare-pages",vercel:"vercel",netlify:"netlify"};async function $t(e){if(e.architecture!=="fullstack"||e.deploymentTarget==="node")return;let t=nn[e.deploymentTarget];if(!t)return;let r=rn(e.projectDir,"apps/web-nuxt/nuxt.config.ts"),n=await tn(r,"utf-8");n.includes("nitro:")?n=n.replace(/nitro:\s*\{/,`nitro: {
+		preset: "${t}",`):n=n.replace(/defineNuxtConfig\(\{/,`defineNuxtConfig({
+	nitro: {
+		preset: "${t}",
+	},`),await l(r,n)}async function Ut(e){if(e.deploymentTarget!=="node")switch(e.deploymentTarget){case"cloudflare":e.architecture==="separate"?await on(e):await sn(e);break;case"vercel":e.architecture==="separate"&&await an(e);break;case"netlify":e.architecture==="separate"&&await cn(e);break}}function Vt(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET","INNGEST_EVENT_KEY"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.emailProvider==="resend"&&t.push("RESEND_API_KEY"),e.emailProvider==="ses"&&t.push("AMAZON_SES_KEY","AMAZON_SES_SECRET"),e.paymentProvider==="stripe"&&t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"),e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),t}async function on(e){let t=Vt(e).map(n=>`#   ${n}`).join(`
+`),r=`name = "${e.projectName}-api"
 main = "src/index.ts"
-compatibility_date = "2024-12-01"
+compatibility_date = "2025-04-01"
+compatibility_flags = ["nodejs_compat", "nodejs_compat_populate_process_env"]
+minify = true
 
 [vars]
-API_URL = "https://api.example.com"
-`;await d(`${e.projectDir}/apps/backend/wrangler.toml`,t)}async function Vr(e){let t=JSON.stringify({buildCommand:"pnpm build",outputDirectory:"dist",framework:null,rewrites:[{source:"/(.*)",destination:"/api"}]},null,"	")+`
-`;await d(`${e.projectDir}/apps/backend/vercel.json`,t)}async function Ur(e){await d(`${e.projectDir}/apps/backend/netlify.toml`,`[build]
+NODE_ENV = "production"
+API_URL = "https://api.${e.projectName}.com"
+INNGEST_APP_ID = "api"
+INNGEST_BASE_URL = "https://api.${e.projectName}.com"
+
+# Required secrets (set via: wrangler secret put <NAME>):
+${t}
+
+# Hyperdrive accelerates database connections from Workers.
+# Create with: wrangler hyperdrive create ${e.projectName}-db --connection-string="$DATABASE_URL"
+# Then replace YOUR_HYPERDRIVE_ID with the returned ID.
+# [[hyperdrive]]
+# binding = "HYPERDRIVE"
+# id = "YOUR_HYPERDRIVE_ID"
+# localConnectionString = "postgres://postgres:postgres@localhost:5432/saas"
+`;await l(`${e.projectDir}/apps/backend/wrangler.toml`,r)}async function sn(e){let t=Vt(e).map(n=>`#   ${n}`).join(`
+`),r=`name = "${e.projectName}"
+pages_build_output_dir = ".output/public"
+compatibility_date = "2025-04-01"
+compatibility_flags = ["nodejs_compat", "nodejs_compat_populate_process_env"]
+
+[vars]
+NODE_ENV = "production"
+NUXT_PUBLIC_API_URL = "https://${e.projectName}.pages.dev/api"
+API_URL = "https://${e.projectName}.pages.dev/api"
+INNGEST_APP_ID = "api"
+INNGEST_BASE_URL = "https://${e.projectName}.pages.dev/api"
+
+# Required secrets (set via: wrangler pages secret put <NAME> --project-name=${e.projectName}):
+${t}
+`;await l(`${e.projectDir}/apps/web-nuxt/wrangler.toml`,r)}async function an(e){let t=JSON.stringify({rewrites:[{source:"/(.*)",destination:"/api/index"}]},null,"	")+`
+`;await l(`${e.projectDir}/apps/backend/vercel.json`,t),await l(`${e.projectDir}/apps/backend/api/index.ts`,`export { default } from "../src/index.js";
+`)}async function cn(e){await l(`${e.projectDir}/apps/backend/netlify.toml`,`[build]
   command = "pnpm build"
   publish = "dist"
 
@@ -349,7 +625,7 @@ API_URL = "https://api.example.com"
   from = "/*"
   to = "/.netlify/functions/index"
   status = 200
-`)}function Mr(e){return e==="stripe"?'					stripePriceId: "",':'					polarProductId: "",'}function Fr(e){return e==="stripe"?'				stripePriceId: "",':'				polarProductId: "",'}function Kr(e){return e==="stripe"?'			stripeProductId: "",':'			polarProductId: "",'}async function Tt(e){if(e.paymentProvider==="none")return;let t=e.paymentProvider,r=e.defaultCurrency,i=Mr(t),n=Fr(t),o=Kr(t),a=`import type { PricingConfig } from "../types/index.js";
+`)}function pn(e){return e==="stripe"?'					stripePriceId: "",':'					polarProductId: "",'}function ln(e){return e==="stripe"?'				stripePriceId: "",':'				polarProductId: "",'}function dn(e){return e==="stripe"?'			stripeProductId: "",':'			polarProductId: "",'}async function Mt(e){if(e.paymentProvider==="none")return;let t=e.paymentProvider,r=e.defaultCurrency,n=pn(t),i=ln(t),o=dn(t),s=`import type { PricingConfig } from "../types/index.js";
 
 export const pricingConfig: PricingConfig = {
 	defaultPlan: "free",
@@ -390,7 +666,7 @@ export const pricingConfig: PricingConfig = {
 			],
 			prices: [
 				{
-${i}
+${n}
 					interval: "month",
 					amounts: { ${r}: 9 }
 				}
@@ -417,14 +693,14 @@ ${i}
 			],
 			prices: [
 				{
-${i}
+${n}
 					interval: "month",
 					amounts: { ${r}: 29 },
 					anchorAmounts: { ${r}: 39 },
 					featured: true
 				},
 				{
-${i}
+${n}
 					interval: "year",
 					amounts: { ${r}: 290 },
 					anchorAmounts: { ${r}: 390 }
@@ -450,19 +726,19 @@ ${i}
 			],
 			prices: [
 				{
-${i}
+${n}
 					interval: "month",
 					amounts: { ${r}: 79 },
 					anchorAmounts: { ${r}: 99 }
 				},
 				{
-${i}
+${n}
 					interval: "year",
 					amounts: { ${r}: 790 },
 					anchorAmounts: { ${r}: 990 }
 				},
 				{
-${i}
+${n}
 					interval: "lifetime",
 					amounts: { ${r}: 1999 }
 				}
@@ -487,7 +763,7 @@ ${i}
 			],
 			prices: [
 				{
-${i}
+${n}
 					interval: "lifetime",
 					amounts: { ${r}: 4999 }
 				}
@@ -514,7 +790,7 @@ ${o}
 				id: "credits_starter",
 				name: "pricing.products.item_1.name",
 				description: "pricing.products.item_1.description",
-${n}
+${i}
 				amounts: { ${r}: 5 },
 				credits: 5
 			},
@@ -522,7 +798,7 @@ ${n}
 				id: "credits_popular",
 				name: "pricing.products.item_2.name",
 				description: "pricing.products.item_2.description",
-${n}
+${i}
 				amounts: { ${r}: 20 },
 				featured: true,
 				credits: 20
@@ -531,7 +807,7 @@ ${n}
 				id: "credits_pro",
 				name: "pricing.products.item_3.name",
 				description: "pricing.products.item_3.description",
-${n}
+${i}
 				amounts: { ${r}: 50 },
 				credits: 50
 			},
@@ -539,7 +815,7 @@ ${n}
 				id: "addon_api",
 				name: "pricing.products.item_4.name",
 				description: "pricing.products.item_4.description",
-${n}
+${i}
 				amounts: { ${r}: 99 },
 				purchaseLimit: 5,
 				maxStock: 10
@@ -547,27 +823,28 @@ ${n}
 		]
 	}
 };
-`,s=`${e.projectDir}/packages/core/src/config/pricing.ts`;await d(s,a)}function Gr(e){let t=[];e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let r=e.frontend==="nuxt"?"Nuxt":e.frontend;if(t.push({type:"node-terminal",request:"launch",name:r,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Email",command:"pnpm dev:email",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.paymentProvider==="stripe"){let i=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${i}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Br(e){let t=e.frontend==="nuxt"?"Nuxt":e.frontend,r=[];return e.architecture==="separate"?r.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):r.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),r}async function kt(e){let t={version:"0.2.0",configurations:Gr(e),compounds:Br(e)};await d(`${e.projectDir}/.vscode/launch.json`,JSON.stringify(t,null,"	")+`
-`)}import{readdir as Hr}from"fs/promises";import{join as zr,relative as Dt}from"path";async function Ct(e,t){let r=[],i=await Hr(e,{withFileTypes:!0});for(let n of i){let o=zr(e,n.name),a=Dt(t,o);Le(a)||(n.isDirectory()?r.push(...await Ct(o,t)):n.isFile()&&r.push(o))}return r}async function Me(e){let r=(await Ct(e,e)).sort(),i=await Promise.all(r.map(async n=>[Dt(e,n),await Ue(n)]));return Object.fromEntries(i)}import{existsSync as Yr}from"fs";import{readFile as xt,readdir as qr}from"fs/promises";import{join as x,dirname as Wr}from"path";import{fileURLToPath as Jr}from"url";var he={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Zr=Object.values(he),We="generatesaas-update",Ot=Wr(Jr(import.meta.url));function Xr(){let e=x(Ot,"skill","content");return Yr(e)?e:x(Ot,"content")}function Je(e){return!e||e.length===0?Zr:e.map(t=>he[t])}async function Ze(e,t,r,i){let n=Je(i);for(let o of n){let a=x(e,o,We),s=x(a,"scripts"),m=x(a,"references");await je(s),await je(m),await d(x(a,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",o)),await d(x(m,".gitkeep"),"");for(let[y,g]of Object.entries(r))await d(x(s,y),g)}}async function $t(e,t){let r=Xr(),i=await xt(x(r,"SKILL.md"),"utf-8"),n=x(r,"scripts"),o=await qr(n),a={};for(let s of o)s!==".gitkeep"&&(a[s]=await xt(x(n,s),"utf-8"));await Ze(e,i,a,t)}import{execFile as Qr,execFileSync as en}from"child_process";import{access as tn}from"fs/promises";import{join as rn}from"path";import*as U from"@clack/prompts";function Ke(e){try{let t=process.platform==="win32"?"where":"which";return en(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function Fe(e,t,r,i=3e5){return new Promise((n,o)=>{Qr(e,t,{cwd:r,timeout:i},a=>{a?o(a):n()})})}async function Lt(e){if(!Ke("pnpm"))return U.log.warn("pnpm not found. Skipping dependency installation."),U.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=U.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await Fe("pnpm",["install"],e),t.stop("Dependencies installed."),!0}catch{return t.stop("Dependency installation failed."),U.log.warn("pnpm install failed. You can run it manually later."),!1}}async function jt(e){try{return await tn(rn(e,".git")),U.log.info("Git repository already exists, skipping init."),!0}catch{}if(!Ke("git"))return U.log.warn("git not found. Skipping repository initialization."),!1;let t=U.spinner();t.start("Initializing git repository...");try{return await Fe("git",["init"],e),await Fe("git",["add","-A"],e),await Fe("git",["commit","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),U.log.warn("You can run git init manually later."),!1}}import*as le from"@clack/prompts";import O from"picocolors";function Nt(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&le.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let r=[];if(r.push(`cd ${e.projectDir}`),t.pnpmInstalled||r.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(a=>ae[a].label).join(", ");r.push(`pnpm infra         ${O.dim(`# ${o}`)}`)}if(r.push(`pnpm dev           ${O.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(r.push(""),r.push(O.dim("Fill in remaining TODO values in .env"))),le.note(r.join(`
-`),O.yellow("Start Development")),t.dockerComposeGenerated){let o=[];o.push(`App          ${O.cyan("http://localhost:3000")}`),e.architecture==="separate"&&o.push(`API          ${O.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&o.push(`Mailpit      ${O.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&o.push(`Inngest      ${O.cyan("http://localhost:8288")}`),le.note(o.join(`
-`),O.yellow("Dev Tools"))}let i=[],n=nn(e);n.length>0&&i.push(`Set in production: ${O.dim(n.join(", "))}`),i.push("pnpm db:push       # Run database migrations"),i.push(on(e)),le.note(i.join(`
-`),O.yellow("Deployment"))}function nn(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function on(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"cloudflare":return"wrangler deploy     # Deploy to Cloudflare Workers";case"vercel":return"vercel deploy       # Deploy to Vercel";case"netlify":return"netlify deploy      # Deploy to Netlify"}}function Mt(e){let t={};if(e.name!==void 0){if(!xe(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0&&(t.frontend=e.frontend),e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.docker!==void 0&&(t.dockerServices=Ut(e.docker,Te,"docker service")),e.aiTools!==void 0&&(t.aiTools=Ut(e.aiTools,ke,"AI tool")),e.currency!==void 0){if(!ee.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${ee.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!te.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${te.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!re.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${re.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!ne.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${ne.join(", ")}`);t.cacheProvider=e.cache}return t}var Vt={projectName:"my-saas",frontend:"nuxt",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!1,revenueSharing:!1,dockerServices:["postgres","redis","inngest"],aiTools:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function Ft(e){let t=e.projectName??Vt.projectName,r=e.projectDir??`./${t}`,i=e.appName??Ce(t),n={...Vt,...e,projectName:t,appName:i,projectDir:r};for(let o of ge){if(n.deploymentTarget!==o.target)continue;let a=n.databaseProvider===o.provider?"database":"cache";if(n.databaseProvider===o.provider||n.cacheProvider===o.provider)throw new Error(`Incompatible: --deploy ${o.target} + --${a} ${o.provider}. ${o.reason}`)}return n}function Ut(e,t,r){if(e.trim()==="")return[];let i=e.split(",").map(o=>o.trim()).filter(Boolean),n=i.filter(o=>!t.includes(o));if(n.length>0)throw new Error(`Invalid ${r}(s): ${n.join(", ")}. Valid values: ${t.join(", ")}`);return i}import dn from"picocolors";function Kt(e){e.command("init").description("Scaffold a new GenerateSaaS project").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new Z("--architecture <type>","fullstack or separate").choices([..._e])).addOption(new Z("--payment <provider>","payment provider").choices([...Pe])).addOption(new Z("--email <provider>","email provider").choices([...Re])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new Z("--billing-scope <scope>","billing scope (requires --org)").choices([...De])).option("--blog","enable blog").option("--no-blog","disable blog").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").addOption(new Z("--currency <code>","default currency for billing").choices([...ee])).addOption(new Z("--deploy <target>","deployment target").choices([...te])).addOption(new Z("--database <provider>","database provider").choices([...re])).addOption(new Z("--cache <provider>","cache provider").choices([...ne])).option("--api-key <key>","API key (skips interactive prompt)").option("-y, --yes","accept defaults for unspecified options (non-interactive)").action(async t=>{await mn(t)})}async function mn(e){let t=performance.now();rt("0.7.0");let r;try{r=Mt(e)}catch(h){v.cancel(E(h)),process.exit(1)}let i=v.spinner(),n;try{n=await ce({apiKey:e.apiKey,prompt:!e.yes})}catch(h){v.cancel(E(h)),process.exit(1)}let o=D(n);i.start("Verifying access...");let a;try{a=(await C(o)).latest,i.stop("Access verified."),B(n)}catch(h){if(i.stop("Access verification failed."),h instanceof w&&h.status===401){v.log.warning("Invalid API key."),n=await H(),o=D(n),i.start("Verifying access...");try{a=(await C(o)).latest,i.stop("Access verified."),B(n)}catch(b){i.stop("Access verification failed."),v.cancel(b instanceof w&&b.status===401?"Invalid API key.":E(b)),process.exit(1)}}else v.cancel(E(h)),process.exit(1)}v.log.success(`Latest version: ${a}`);let s;i.start("Activating license...");try{let h=crypto.randomUUID();s={token:(await mt(o,{frontend:"nuxt",version:a,installId:h})).token,keyHash:wt(n),installId:h},i.stop("License activated.")}catch(h){i.stop("License activation failed."),v.cancel(E(h)),process.exit(1)}let m;e.yes?m=Ft(r):m=await ot(r);let y=pn(m.projectDir);if(an(y)&&sn(y).length>0)if(e.yes)v.log.info(`Directory ${y} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let b=await v.select({message:`Directory ${y} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(v.isCancel(b)||b==="cancel")&&(v.cancel("Setup cancelled."),process.exit(0)),b==="overwrite"&&cn(y,{recursive:!0,force:!0})}let g={...m,projectDir:y,version:a};i.start("Downloading template...");try{await ye(o,a,y);let h=await Me(y);await d(ln(y,$e),JSON.stringify(h,null,"	")+`
-`),await at(y),i.stop("Template downloaded.")}catch(h){i.stop("Download failed."),v.cancel(E(h)),process.exit(1)}let T;i.start("Generating project files...");try{await yt(g),await Tt(g),await It(g),T=await vt(g),await kt(g),await St(g),await ht(g),await gt(g),await Rt(g),await $t(y,g.aiTools),await Pt(g,s),i.stop("Project files generated.")}catch(h){i.stop("Generation failed."),v.cancel(E(h)),process.exit(1)}let N=await Lt(y);await jt(y);let z=Ke("docker"),Y=ze(g).map(h=>h.key).filter(h=>!g.credentials?.[h]);Nt(g,{pnpmInstalled:N,dockerComposeGenerated:T,dockerAvailable:z,skippedCredentials:Y}),nt(),v.log.info(dn.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as un}from"fs";import{readFile as fn,rm as gn}from"fs/promises";import{join as ve,resolve as yn}from"path";import{mkdtemp as hn}from"fs/promises";import{tmpdir as vn}from"os";import*as A from"@clack/prompts";import pe from"picocolors";function Gt(e){e.command("update").description("Update AI skill files and stage template updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=yn(t.cwd??process.cwd()),i=ve(r,q),n;try{n=JSON.parse(await fn(i,"utf-8"))}catch{A.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o;try{o=await ce()}catch(m){A.cancel(E(m)),process.exit(1)}let a=D(o),s=A.spinner();try{s.start("Verifying access...");let m;try{m=await C(a)}catch(I){if(I instanceof w&&I.status===401)s.stop("Invalid API key."),o=await H(),a=D(o),s.start("Verifying access..."),m=await C(a);else throw I}s.stop("Access verified."),B(o),s.start("Fetching latest skill files...");let y=await dt(a,m.latest);await Ze(r,y.skillMd,y.scripts,n.aiTools);let g=Je(n.aiTools);if(s.stop("Skills updated."),A.log.success(`Skill files installed to ${pe.cyan(g.length.toString())} locations.`),n.licenseToken)try{let I=await ut(a,{currentToken:n.licenseToken,newVersion:n.version});n.licenseToken=I.token,await d(i,JSON.stringify(n,null,"	")+`
-`),A.log.success("License refreshed.")}catch{A.log.warn("License refresh skipped.")}if(n.version===m.latest){A.log.info(`Already on the latest version (${n.version}).`);return}let T=ve(r,ct);s.start(`Downloading v${m.latest} template...`),await ye(a,m.latest,T),s.stop("Template staged.");let N=await pt(a,m.latest);N&&A.note(N,`Changelog v${m.latest}`);let z=ve(r,$e);if(!un(z)){s.start("Computing baseline template hashes (one-time migration)...");let I=await hn(ve(vn(),"gs-update-"));try{await ye(a,n.version,I);let Y=await Me(I);await d(z,JSON.stringify(Y,null,"	")+`
-`)}finally{await gn(I,{recursive:!0,force:!0})}s.stop("Baseline hashes computed.")}if(await d(ve(r,lt),JSON.stringify({currentVersion:n.version,targetVersion:m.latest,changelog:N,stagedAt:new Date().toISOString()},null,"	")+`
-`),A.log.info(`Update staged: ${pe.cyan(n.version)} \u2192 ${pe.cyan(m.latest)}`),n.aiTools&&n.aiTools.length>0){let I=n.aiTools[0],Y=fe[I].label;A.log.info(`Open your project in ${pe.cyan(Y)} and ask: ${pe.cyan("'update my GenerateSaaS project'")}`)}else A.log.info(`Ask your AI coding assistant to ${pe.cyan("'update my GenerateSaaS project'")}.`)}catch(m){s.stop("Failed."),A.cancel(`Update failed: ${E(m)}`),process.exit(1)}})}import*as L from"@clack/prompts";import $ from"picocolors";import{readFile as Sn}from"fs/promises";import{join as En,resolve as In}from"path";function Bt(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=In(t.cwd??process.cwd()),i=En(r,q),n;try{n=JSON.parse(await Sn(i,"utf-8"))}catch{L.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o=[`Version:       ${$.cyan(n.version)}`,`Frontend:      ${$.cyan(n.frontend)}`,n.deploymentTarget?`Deploy target: ${$.cyan(n.deploymentTarget)}`:null,n.databaseProvider?`Database:      ${$.cyan(n.databaseProvider)}`:null,n.cacheProvider?`Cache:         ${$.cyan(n.cacheProvider)}`:null,n.aiTools&&n.aiTools.length>0?`AI tools:      ${$.cyan(n.aiTools.join(", "))}`:null].filter(Boolean).join(`
-`);L.note(o,$.bold("Project Status"));let a=L.spinner();a.start("Checking for updates...");try{let s=await ce(),m=D(s),y;try{y=await C(m)}catch(T){if(T instanceof w&&T.status===401)a.stop("Invalid API key."),s=await H(),m=D(s),a.start("Checking for updates..."),y=await C(m),B(s);else throw T}let g=y.latest;n.version===g?(a.stop("Up to date."),L.log.success(`Already on the latest version (${$.green(g)})`)):(a.stop("Update available."),L.log.warning(`Update available: ${$.yellow(n.version)} \u2192 ${$.green(g)}`),L.log.info(`Run ${$.cyan("generatesaas update")} to update skill files, then ask your AI assistant to apply the update.`))}catch(s){a.stop("Check failed."),L.log.warning(`Could not check for updates: ${E(s)}`)}})}import{readFile as An}from"fs/promises";import*as P from"@clack/prompts";import M from"picocolors";function wn(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let r=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(r)}function Xe(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function Ht(e){P.note([`License ID:    ${M.cyan(String(e.lid??"unknown"))}`,`Version:       ${M.cyan(String(e.ver??"unknown"))}`,`Init version:  ${String(e.iver??"unknown")}`,`Frontend:      ${String(e.fe??"unknown")}`,`Created:       ${Xe(e.pat)}`,`Last updated:  ${Xe(e.uat)}`,`Expires:       ${Xe(e.exp)}`,`Install ID:    ${String(e.nid??"unknown")}`].join(`
-`),M.yellow("License Details"))}async function zt(e){let t=P.spinner(),r=e.replace(/\/+$/,"");t.start(`Checking ${r}/license...`);let i;try{let o=await fetch(`${r}/license`);if(!o.ok)return t.stop(`${M.red("Not found")} \u2014 ${r}/license returned ${o.status}`),!1;if(i=await o.text(),!i||i.split(".").length!==3)return t.stop(`${M.red("Invalid")} \u2014 response is not a JWT`),!1;t.stop(`${M.green("Found")} \u2014 license endpoint responded`)}catch(o){return t.stop(`${M.red("Failed")} \u2014 ${E(o)}`),!1}let n;try{n=wn(i)}catch{return P.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let o=process.env.GENERATESAAS_API_URL??Oe,a=await ft(o,i);if(a.valid)t.stop(`${M.green("Valid")} \u2014 signature verified`);else return t.stop(`${M.red("Invalid")} \u2014 ${a.reason}`),!1}catch{return t.stop(`${M.yellow("Skipped")} \u2014 could not reach verification service`),P.log.warn("Signature not verified. Displaying unverified claims:"),Ht(n),!1}return Ht(n),!0}function Yt(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,r)=>{if(!t&&!r.file&&(P.cancel("Provide a URL or --file <path>."),process.exit(1)),r.file){let n=(await An(r.file,"utf-8")).split(`
-`).map(a=>a.trim()).filter(a=>a&&!a.startsWith("#"));n.length===0&&(P.cancel("No URLs found in file."),process.exit(1));let o=0;for(let a of n)await zt(a)&&o++,P.log.info("");P.log.success(`${o}/${n.length} sites verified.`)}else await zt(t)||process.exit(1)})}import{existsSync as bn,rmSync as _n}from"fs";import*as j from"@clack/prompts";function qt(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){bn(G)?(_n(G),j.log.success("API key removed.")):j.log.info("No API key configured.");return}let r=Ye();r?j.log.info(`Current API key: ${r.slice(0,8)}...${r.slice(-4)}`):j.log.info("No API key configured.");let i=await H(),n=D(i),o=j.spinner();o.start("Verifying API key...");try{await C(n),o.stop("API key verified."),B(i),j.log.success("API key saved.")}catch(a){o.stop("Verification failed."),a instanceof w&&a.status===401?j.cancel("Invalid API key."):j.cancel(E(a)),process.exit(1)}})}import{existsSync as Ge,rmSync as Pn,readFileSync as et,writeFileSync as Wt}from"fs";import{join as ie}from"path";import*as R from"@clack/prompts";var Rn=["packages/api/src/functions/license-heartbeat.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Tn=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/license-heartbeat.js";
+`,a=`${e.projectDir}/packages/core/src/config/pricing.ts`;await l(a,s)}function mn(e){let t=[];e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let r=e.frontend==="nuxt"?"Nuxt":e.frontend;if(t.push({type:"node-terminal",request:"launch",name:r,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Email",command:"pnpm dev:email",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.paymentProvider==="stripe"){let n=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${n}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function un(e){let t=e.frontend==="nuxt"?"Nuxt":e.frontend,r=[];return e.architecture==="separate"?r.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):r.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),r}async function Ft(e){let t={version:"0.2.0",configurations:mn(e),compounds:un(e)};await l(`${e.projectDir}/.vscode/launch.json`,JSON.stringify(t,null,"	")+`
+`)}import{relative as fn}from"path";async function Ie(e){let r=(await oe(e,e,de)).sort(),n=await Promise.all(r.map(async i=>[fn(e,i),await Be(i)]));return Object.fromEntries(n)}import{copyFile as gn,mkdir as yn,rm as hn}from"fs/promises";import{dirname as En,join as Kt,relative as vn}from"path";import{existsSync as Sn}from"fs";async function zt(e,t){let r=Kt(t,Fe);Sn(r)&&await hn(r,{recursive:!0,force:!0});let n=await oe(e,e,de);for(let i of n){let o=vn(e,i),s=Kt(r,o);await yn(En(s),{recursive:!0}),await gn(i,s)}}import{existsSync as _n}from"fs";import{readFile as Gt,readdir as In}from"fs/promises";import{join as $,dirname as An,resolve as Pn,sep as Tn}from"path";import{fileURLToPath as wn}from"url";var Ae={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Rn=Object.values(Ae),it="generatesaas-update",Bt=An(wn(import.meta.url));function bn(){let e=$(Bt,"skill","content");return _n(e)?e:$(Bt,"content")}function ot(e){return!e||e.length===0?Rn:e.map(t=>Ae[t])}async function st(e,t,r,n){let i=ot(n);for(let o of i){let s=$(e,o,it),a=$(s,"scripts"),m=$(s,"references");await Ke(a),await Ke(m),await l($(s,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",o)),await l($(m,".gitkeep"),"");for(let[g,u]of Object.entries(r)){let E=Pn(a,g);E.startsWith(a+Tn)&&await l(E,u)}}}async function Ht(e,t){let r=bn(),n=await Gt($(r,"SKILL.md"),"utf-8"),i=$(r,"scripts"),o=await In(i),s={};for(let a of o)a!==".gitkeep"&&(s[a]=await Gt($(i,a),"utf-8"));await st(e,n,s,t)}import{execFile as kn,execFileSync as Dn}from"child_process";import{access as On}from"fs/promises";import{join as Cn}from"path";import*as U from"@clack/prompts";function We(e){try{let t=process.platform==="win32"?"where":"which";return Dn(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function qe(e,t,r,n=3e5){return new Promise((i,o)=>{kn(e,t,{cwd:r,timeout:n},s=>{s?o(s):i()})})}async function Yt(e){if(!We("pnpm"))return U.log.warn("pnpm not found. Skipping dependency installation."),U.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=U.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await qe("pnpm",["install"],e),t.stop("Dependencies installed."),!0}catch{return t.stop("Dependency installation failed."),U.log.warn("pnpm install failed. You can run it manually later."),!1}}async function qt(e){try{return await On(Cn(e,".git")),U.log.info("Git repository already exists, skipping init."),!0}catch{}if(!We("git"))return U.log.warn("git not found. Skipping repository initialization."),!1;let t=U.spinner();t.start("Initializing git repository...");try{return await qe("git",["init"],e),await qe("git",["add","-A"],e),await qe("git",["commit","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),U.log.warn("You can run git init manually later."),!1}}import*as me from"@clack/prompts";import x from"picocolors";function Wt(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&me.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let r=[];if(r.push(`cd ${e.projectDir}`),t.pnpmInstalled||r.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(s=>pe[s].label).join(", ");r.push(`pnpm infra         ${x.dim(`# ${o}`)}`)}if(r.push(`pnpm dev           ${x.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(r.push(""),r.push(x.dim("Fill in remaining TODO values in .env"))),me.note(r.join(`
+`),x.yellow("Start Development")),t.dockerComposeGenerated){let o=[];o.push(`App          ${x.cyan("http://localhost:3000")}`),e.architecture==="separate"&&o.push(`API          ${x.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&o.push(`Mailpit      ${x.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&o.push(`Inngest      ${x.cyan("http://localhost:8288")}`),me.note(o.join(`
+`),x.yellow("Dev Tools"))}let n=[],i=xn(e);i.length>0&&n.push(`Set in production: ${x.dim(i.join(", "))}`),n.push("pnpm db:push       # Run database migrations"),n.push(Nn(e)),me.note(n.join(`
+`),x.yellow("Deployment"))}function xn(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function Nn(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"cloudflare":return e.architecture==="fullstack"?"wrangler pages deploy .output/public  # Deploy to Cloudflare Pages":"wrangler deploy                       # Deploy to Cloudflare Workers";case"vercel":return"vercel deploy       # Deploy to Vercel";case"netlify":return"netlify deploy      # Deploy to Netlify"}}function Xt(e){let t={};if(e.name!==void 0){if(!Ue(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0&&(t.frontend=e.frontend),e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.docker!==void 0&&(t.dockerServices=Jt(e.docker,Ne,"docker service")),e.aiTools!==void 0&&(t.aiTools=Jt(e.aiTools,Le,"AI tool")),e.currency!==void 0){if(!ee.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${ee.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!te.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${te.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!re.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${re.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!ne.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${ne.join(", ")}`);t.cacheProvider=e.cache}return t}var X={projectName:"my-saas",frontend:"nuxt",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!1,revenueSharing:!1,dockerServices:["postgres","redis","inngest"],aiTools:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function Zt(e){let t=e.projectName??X.projectName,r=e.projectDir??`./${t}`,n=e.appName??$e(t),i=e.deploymentTarget??X.deploymentTarget,o=K[i]?.edgeRuntime??!1,s=e.databaseProvider??(o?"neon":X.databaseProvider),a=e.cacheProvider??(o?"upstash":X.cacheProvider),m=e.emailProvider??(o?"resend":X.emailProvider),g=e.dockerServices??(o?X.dockerServices.filter(E=>E!=="postgres"&&E!=="redis"):X.dockerServices),u={...X,...e,projectName:t,appName:n,projectDir:r,deploymentTarget:i,databaseProvider:s,cacheProvider:a,emailProvider:m,dockerServices:g};for(let E of ve){if(u.deploymentTarget!==E.target)continue;let w=u.databaseProvider===E.provider?"database":"cache";if(u.databaseProvider===E.provider||u.cacheProvider===E.provider)throw new Error(`Incompatible: --deploy ${E.target} + --${w} ${E.provider}. ${E.reason}`)}return u}function Jt(e,t,r){if(e.trim()==="")return[];let n=e.split(",").map(o=>o.trim()).filter(Boolean),i=n.filter(o=>!t.includes(o));if(i.length>0)throw new Error(`Invalid ${r}(s): ${i.join(", ")}. Valid values: ${t.join(", ")}`);return n}import Mn from"picocolors";function Qt(e){e.command("init").description("Scaffold a new GenerateSaaS project").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new Z("--architecture <type>","fullstack or separate").choices([...Oe])).addOption(new Z("--payment <provider>","payment provider").choices([...Ce])).addOption(new Z("--email <provider>","email provider").choices([...xe])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new Z("--billing-scope <scope>","billing scope (requires --org)").choices([...je])).option("--blog","enable blog").option("--no-blog","disable blog").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").addOption(new Z("--currency <code>","default currency for billing").choices([...ee])).addOption(new Z("--deploy <target>","deployment target").choices([...te])).addOption(new Z("--database <provider>","database provider").choices([...re])).addOption(new Z("--cache <provider>","cache provider").choices([...ne])).option("--api-key <key>","API key (skips interactive prompt)").option("-y, --yes","accept defaults for unspecified options (non-interactive)").action(async t=>{await Fn(t)})}async function Fn(e){let t=performance.now();dt("0.8.0");let r;try{r=Xt(e)}catch(y){S.cancel(I(y)),process.exit(1)}let n=S.spinner(),i;try{i=await le({apiKey:e.apiKey,prompt:!e.yes})}catch(y){S.cancel(I(y)),process.exit(1)}let o=O(i);n.start("Verifying access...");let s;try{s=(await C(o)).latest,n.stop("Access verified."),H(i)}catch(y){if(n.stop("Access verification failed."),y instanceof P&&y.status===401){e.yes&&(S.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),S.log.warning("Invalid API key."),i=await Y(),o=O(i),n.start("Verifying access...");try{s=(await C(o)).latest,n.stop("Access verified."),H(i)}catch(v){n.stop("Access verification failed."),S.cancel(v instanceof P&&v.status===401?"Invalid API key.":I(v)),process.exit(1)}}else S.cancel(I(y)),process.exit(1)}S.log.success(`Latest version: ${s}`);let a;n.start("Activating license...");try{let y=crypto.randomUUID();a={token:(await _t(o,{frontend:"nuxt",version:s,installId:y})).token,keyHash:Ct(i),installId:y},n.stop("License activated.")}catch(y){n.stop("License activation failed."),S.cancel(I(y)),process.exit(1)}let m;e.yes?m=Zt(r):m=await ft(r);let g=Vn(m.projectDir);if(Ln(g)&&jn(g).length>0)if(e.yes)S.log.info(`Directory ${g} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let v=await S.select({message:`Directory ${g} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(S.isCancel(v)||v==="cancel")&&(S.cancel("Setup cancelled."),process.exit(0)),v==="overwrite"&&$n(g,{recursive:!0,force:!0})}let u={...m,projectDir:g,version:s};n.start("Downloading template...");try{await Se(o,s,g);let y=await Ie(g);await l(Un(g,Me),JSON.stringify(y,null,"	")+`
+`),await zt(g,g),await gt(g),n.stop("Template downloaded.")}catch(y){n.stop("Download failed."),S.cancel(I(y)),process.exit(1)}let E;n.start("Generating project files...");try{await Tt(u),await Mt(u),await Dt(u),E=await Rt(u),await Ft(u),await bt(u),await wt(u),await Pt(u),await jt(u),await Ut(u),await $t(u),await Ht(g,u.aiTools),await Lt(u),await Nt(u,a),n.stop("Project files generated.")}catch(y){n.stop("Generation failed."),S.cancel(I(y)),process.exit(1)}let w=await Yt(g);await qt(g);let M=We("docker"),ce=Ze(u).map(y=>y.key).filter(y=>!u.credentials?.[y]);Wt(u,{pnpmInstalled:w,dockerComposeGenerated:E,dockerAvailable:M,skippedCredentials:ce}),mt(),S.log.info(Mn.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as er}from"fs";import{readFile as Kn}from"fs/promises";import{join as Pe,resolve as zn}from"path";import*as A from"@clack/prompts";import ue from"picocolors";function tr(e){e.command("update").description("Update AI skill files and stage template updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=zn(t.cwd??process.cwd()),n=Pe(r,q),i;try{i=JSON.parse(await Kn(n,"utf-8"))}catch{A.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o;try{o=await le()}catch(m){A.cancel(I(m)),process.exit(1)}let s=O(o),a=A.spinner();try{a.start("Verifying access...");let m;try{m=await C(s)}catch(v){if(v instanceof P&&v.status===401)a.stop("Invalid API key."),o=await Y(),s=O(o),a.start("Verifying access..."),m=await C(s);else throw v}a.stop("Access verified."),H(o),a.start("Fetching latest skill files...");let g=await St(s,m.latest);await st(r,g.skillMd,g.scripts,i.aiTools);let u=ot(i.aiTools);if(a.stop("Skills updated."),A.log.success(`Skill files installed to ${ue.cyan(u.length.toString())} locations.`),i.licenseToken)try{let v=await It(s,{currentToken:i.licenseToken,newVersion:i.version});i.licenseToken=v.token,await l(n,JSON.stringify(i,null,"	")+`
+`),A.log.success("License refreshed.")}catch{A.log.warn("License refresh skipped.")}if(i.version===m.latest){A.log.info(`Already on the latest version (${i.version}).`);return}let E=Pe(r,ht);a.start(`Downloading v${m.latest} template...`),await Se(s,m.latest,E),a.stop("Template staged.");let w=await vt(s,m.latest);w&&A.note(w,`Changelog v${m.latest}`);let M=Pe(r,Me),F=Pe(r,Fe),ce=!er(F),y=!er(M);if(ce){if(a.start("Downloading baseline template (one-time migration)..."),await Se(s,i.version,F),y){let v=await Ie(F);await l(M,JSON.stringify(v,null,"	")+`
+`)}a.stop("Baseline template stored.")}else if(y){a.start("Computing baseline template hashes...");let v=await Ie(F);await l(M,JSON.stringify(v,null,"	")+`
+`),a.stop("Baseline hashes computed.")}if(await l(Pe(r,Et),JSON.stringify({currentVersion:i.version,targetVersion:m.latest,changelog:w,stagedAt:new Date().toISOString()},null,"	")+`
+`),A.log.info(`Update staged: ${ue.cyan(i.version)} \u2192 ${ue.cyan(m.latest)}`),i.aiTools&&i.aiTools.length>0){let v=i.aiTools[0],fe=Ee[v].label;A.log.info(`Open your project in ${ue.cyan(fe)} and ask: ${ue.cyan("'update my GenerateSaaS project'")}`)}else A.log.info(`Ask your AI coding assistant to ${ue.cyan("'update my GenerateSaaS project'")}.`)}catch(m){a.stop("Failed."),A.cancel(`Update failed: ${I(m)}`),process.exit(1)}})}import*as L from"@clack/prompts";import N from"picocolors";import{readFile as Gn}from"fs/promises";import{join as Bn,resolve as Hn}from"path";function rr(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=Hn(t.cwd??process.cwd()),n=Bn(r,q),i;try{i=JSON.parse(await Gn(n,"utf-8"))}catch{L.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o=[`Version:       ${N.cyan(i.version)}`,`Frontend:      ${N.cyan(i.frontend)}`,i.deploymentTarget?`Deploy target: ${N.cyan(i.deploymentTarget)}`:null,i.databaseProvider?`Database:      ${N.cyan(i.databaseProvider)}`:null,i.cacheProvider?`Cache:         ${N.cyan(i.cacheProvider)}`:null,i.aiTools&&i.aiTools.length>0?`AI tools:      ${N.cyan(i.aiTools.join(", "))}`:null].filter(Boolean).join(`
+`);L.note(o,N.bold("Project Status"));let s=L.spinner();s.start("Checking for updates...");try{let a=await le(),m=O(a),g;try{g=await C(m)}catch(E){if(E instanceof P&&E.status===401)s.stop("Invalid API key."),a=await Y(),m=O(a),s.start("Checking for updates..."),g=await C(m),H(a);else throw E}let u=g.latest;i.version===u?(s.stop("Up to date."),L.log.success(`Already on the latest version (${N.green(u)})`)):(s.stop("Update available."),L.log.warning(`Update available: ${N.yellow(i.version)} \u2192 ${N.green(u)}`),L.log.info(`Run ${N.cyan("generatesaas update")} to update skill files, then ask your AI assistant to apply the update.`))}catch(a){s.stop("Check failed."),L.log.warning(`Could not check for updates: ${I(a)}`)}})}import{readFile as Yn}from"fs/promises";import*as R from"@clack/prompts";import V from"picocolors";function qn(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let r=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(r)}function at(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function nr(e){R.note([`License ID:    ${V.cyan(String(e.lid??"unknown"))}`,`Version:       ${V.cyan(String(e.ver??"unknown"))}`,`Init version:  ${String(e.iver??"unknown")}`,`Frontend:      ${String(e.fe??"unknown")}`,`Created:       ${at(e.pat)}`,`Last updated:  ${at(e.uat)}`,`Expires:       ${at(e.exp)}`,`Install ID:    ${String(e.nid??"unknown")}`].join(`
+`),V.yellow("License Details"))}async function ir(e){let t=R.spinner(),r=e.replace(/\/+$/,"");t.start(`Checking ${r}/license...`);let n;try{let o=await fetch(`${r}/license`);if(!o.ok)return t.stop(`${V.red("Not found")} \u2014 ${r}/license returned ${o.status}`),!1;if(n=await o.text(),!n||n.split(".").length!==3)return t.stop(`${V.red("Invalid")} \u2014 response is not a JWT`),!1;t.stop(`${V.green("Found")} \u2014 license endpoint responded`)}catch(o){return t.stop(`${V.red("Failed")} \u2014 ${I(o)}`),!1}let i;try{i=qn(n)}catch{return R.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let o=process.env.GENERATESAAS_API_URL??Ve,s=await At(o,n);if(s.valid)t.stop(`${V.green("Valid")} \u2014 signature verified`);else return t.stop(`${V.red("Invalid")} \u2014 ${s.reason}`),!1}catch{return t.stop(`${V.yellow("Skipped")} \u2014 could not reach verification service`),R.log.warn("Signature not verified. Displaying unverified claims:"),nr(i),!1}return nr(i),!0}function or(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,r)=>{if(!t&&!r.file&&(R.cancel("Provide a URL or --file <path>."),process.exit(1)),r.file){let i=(await Yn(r.file,"utf-8")).split(`
+`).map(s=>s.trim()).filter(s=>s&&!s.startsWith("#"));i.length===0&&(R.cancel("No URLs found in file."),process.exit(1));let o=0;for(let s of i)await ir(s)&&o++,R.log.info("");R.log.success(`${o}/${i.length} sites verified.`)}else await ir(t)||process.exit(1)})}import{existsSync as Wn,rmSync as Jn}from"fs";import*as j from"@clack/prompts";function sr(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Wn(B)?(Jn(B),j.log.success("API key removed.")):j.log.info("No API key configured.");return}let r=Qe();r?j.log.info(`Current API key: ****${r.slice(-4)}`):j.log.info("No API key configured.");let n=await Y(),i=O(n),o=j.spinner();o.start("Verifying API key...");try{await C(i),o.stop("API key verified."),H(n),j.log.success("API key saved.")}catch(s){o.stop("Verification failed."),s instanceof P&&s.status===401?j.cancel("Invalid API key."):j.cancel(I(s)),process.exit(1)}})}import{existsSync as Je,rmSync as Xn,readFileSync as pt,writeFileSync as ar}from"fs";import{join as se}from"path";import*as b from"@clack/prompts";var Zn=["packages/api/src/functions/license-heartbeat.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Qn=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/license-heartbeat.js";
 `,`	licenseHeartbeatFunction,
 `]},{file:"packages/api/src/routes/internal/index.ts",removals:[`import licenseRoutes from "./license.js";
 `,`	.route("/license", licenseRoutes)
-`]}];function kn(e){return(e&&e.length>0?e.map(r=>he[r]):Object.values(he)).map(r=>ie(r,We))}function Qe(e){return Ge(e)?(Pn(e,{recursive:!0}),!0):!1}function Dn(e,t){if(!Ge(e))return!1;let r=et(e,"utf-8"),i=r;for(let n of t)i=i.replace(n,"");return i===r?!1:(Wt(e,i,"utf-8"),!0)}function Cn(e){let t=ie(e,".gitignore");if(!Ge(t))return!1;let r=et(t,"utf-8"),i=r.split(`
-`).filter(n=>!n.includes(".generatesaas")).join(`
-`);return i===r?!1:(Wt(t,i,"utf-8"),!0)}function Jt(e){e.command("eject").description("Remove all GenerateSaaS ties \u2014 manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=ie(t,q),i;try{i=JSON.parse(et(r,"utf-8"))}catch{R.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let n=await R.text({message:'Type "eject" to confirm (this cannot be undone):',validate:s=>{if(s!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});R.isCancel(n)&&(R.cancel("Eject cancelled."),process.exit(0));let o=[],a=[];for(let s of kn(i.aiTools))Qe(ie(t,s))&&o.push(s);for(let s of Rn)Qe(ie(t,s))&&o.push(s);Qe(ie(t,V))&&o.push(V+"/");for(let s of Tn){let m=ie(t,s.file);Dn(m,s.removals)?a.push(s.file):Ge(m)&&R.log.warn(`Could not auto-modify ${s.file} \u2014 manually remove license/heartbeat references.`)}Cn(t)&&a.push(".gitignore");for(let s of o)R.log.info(`Deleted ${s}`);for(let s of a)R.log.info(`Modified ${s}`);R.log.success("Ejected successfully. This project is now fully standalone.")})}var oe=new xn().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("0.7.0").addHelpText("after",`
+`]}];function ei(e){return(e&&e.length>0?e.map(r=>Ae[r]):Object.values(Ae)).map(r=>se(r,it))}function ct(e){return Je(e)?(Xn(e,{recursive:!0}),!0):!1}function ti(e,t){if(!Je(e))return!1;let r=pt(e,"utf-8"),n=r;for(let i of t)n=n.replace(i,"");return n===r?!1:(ar(e,n,"utf-8"),!0)}function ri(e){let t=se(e,".gitignore");if(!Je(t))return!1;let r=pt(t,"utf-8"),n=r.split(`
+`).filter(i=>!i.includes(".generatesaas")).join(`
+`);return n===r?!1:(ar(t,n,"utf-8"),!0)}function cr(e){e.command("eject").description("Remove all GenerateSaaS ties \u2014 manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=se(t,q),n;try{n=JSON.parse(pt(r,"utf-8"))}catch{b.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let i=await b.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});b.isCancel(i)&&(b.cancel("Eject cancelled."),process.exit(0));let o=[],s=[];for(let a of ei(n.aiTools))ct(se(t,a))&&o.push(a);for(let a of Zn)ct(se(t,a))&&o.push(a);ct(se(t,D))&&o.push(D+"/");for(let a of Qn){let m=se(t,a.file);ti(m,a.removals)?s.push(a.file):Je(m)&&b.log.warn(`Could not auto-modify ${a.file} \u2014 manually remove license/heartbeat references.`)}ri(t)&&s.push(".gitignore");for(let a of o)b.log.info(`Deleted ${a}`);for(let a of s)b.log.info(`Modified ${a}`);b.log.success("Ejected successfully. This project is now fully standalone.")})}var ae=new ni().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("0.8.0").addHelpText("after",`
 Examples:
   $ generatesaas init                  Interactive setup
   $ generatesaas init -n my-app -y     Quick setup with defaults
   $ generatesaas status                Check for updates
   $ generatesaas auth                  Set or update API key
-`);Kt(oe);Gt(oe);Bt(oe);Yt(oe);qt(oe);Jt(oe);oe.parseAsync().catch(e=>{Zt.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});
+`);Qt(ae);tr(ae);rr(ae);or(ae);sr(ae);cr(ae);ae.parseAsync().catch(e=>{pr.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});