generatesaas 1.12.0 → 1.12.1

package/dist/index.js

@@ -1129,7 +1129,7 @@ export { ops } from "./${r}/index";
 ${f}`:s.message))}else i()})})}async function hn(e){if(!ye("pnpm"))return P.log.warn("pnpm not found. Skipping lockfile regeneration."),!1;try{return await he("pnpm",["install","--lockfile-only","--no-frozen-lockfile","--config.minimumReleaseAge=0"],e),!0}catch(t){let r=t instanceof Error?t.message:String(t);return P.log.warn(`Lockfile regeneration failed: ${r}`),P.log.warn("Deploys using --frozen-lockfile may fail."),!1}}async function yn(e){if(!ye("pnpm"))return P.log.warn("pnpm not found. Skipping dependency installation."),P.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=P.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await he("pnpm",["install","--config.minimumReleaseAge=0"],e),t.stop("Dependencies installed."),!0}catch(r){t.stop("Dependency installation failed.");let n=r instanceof Error?r.message:String(r);return P.log.warn(`pnpm install failed: ${n}`),P.log.warn("You can run it manually later."),!1}}async function vn(e){if(!ye("pnpm"))return!1;let t=P.spinner();t.start("Generating baseline database migration...");try{return await he("pnpm",["-F","@repo/database","generate"],e),t.stop("Baseline migration generated."),!0}catch(r){t.stop("Baseline migration generation failed.");let n=r instanceof Error?r.message:String(r);return P.log.warn(`Could not generate baseline migration: ${n}`),P.log.warn("Run 'pnpm -F @repo/database generate' before your first deploy."),!1}}async function Sn(e){try{return await gn(zt(e,".git")),P.log.info("Git repository already exists, skipping init."),!0}catch{}if(!ye("git"))return P.log.warn("git not found. Skipping repository initialization."),!1;let t=P.spinner();t.start("Initializing git repository...");try{return await he("git",["init"],e),await he("git",["add","-A"],e),await he("git",["commit","--no-verify","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),P.log.warn("You can run git init manually later."),!1}}async function En(e){if(!ye("pnpm"))return!1;try{await gn(zt(e,".git"))}catch{return!1}try{let t=JSON.parse(await zo(zt(e,"package.json"),"utf-8")),r=!!t.devDependencies?.["simple-git-hooks"],n=!!t["simple-git-hooks"];if(!r||!n)return!1}catch{return!1}try{return await he("pnpm",["exec","simple-git-hooks"],e),!0}catch{return P.log.warn("Could not install git hooks. Run 'pnpm exec simple-git-hooks' manually."),!1}}import*as De from"@clack/prompts";import j from"picocolors";function wn(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&De.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let r=[];if(r.push(`cd ${e.projectDir}`),t.pnpmInstalled||r.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(s=>be[s].label).join(", ");r.push(`pnpm infra         ${j.dim(`# ${o}`)}`)}if(r.push(`pnpm dev           ${j.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(r.push(""),r.push(j.dim("Fill in remaining TODO values in .env"))),De.note(r.join(`
 `),j.yellow("Start Development")),t.dockerComposeGenerated){let o=[];o.push(`App          ${j.cyan("http://localhost:3000")}`),e.architecture==="separate"&&o.push(`API          ${j.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&o.push(`Mailpit      ${j.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&o.push(`Inngest      ${j.cyan("http://localhost:8288")}`),De.note(o.join(`
 `),j.yellow("Dev Tools"))}let n=[],i=Ho(e);i.length>0&&n.push(`Set in production: ${j.dim(i.join(", "))}`),n.push("pnpm db:push       # Run database migrations"),n.push(Yo(e)),De.note(n.join(`
-`),j.yellow("Deployment"))}function Ho(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function Yo(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy       # Deploy to Vercel"}}function bn(e){let t={};if(e.name!==void 0){if(!ct(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Me.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Me.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=Ht(e.docker,nt,"docker service")),e.aiTools!==void 0&&(t.aiTools=Ht(e.aiTools,it,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=Ht(e.socialProviders,st,"social provider")),e.currency!==void 0){if(!ae.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${ae.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!ce.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${ce.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!le.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${le.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!pe.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${pe.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let r=e.baseUrl.trim();if(r==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let n;try{n=new URL(r)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${n.protocol}//${n.host}`}return t}var ne={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function An(e){let t=e.projectName??ne.projectName,r=e.projectDir??`./${t}`,n=e.appName??at(t),i=e.deploymentTarget??ne.deploymentTarget,o=B[i]?.edgeRuntime??!1,s=e.databaseProvider??(o?"neon":ne.databaseProvider),a=e.cacheProvider??(o?"upstash":ne.cacheProvider),d=e.emailProvider??(o?"resend":ne.emailProvider),y=e.dockerServices??(o?ne.dockerServices.filter(f=>f!=="postgres"&&f!=="redis"):ne.dockerServices),h={...ne,...e,projectName:t,appName:n,projectDir:r,deploymentTarget:i,databaseProvider:s,cacheProvider:a,emailProvider:d,dockerServices:y};h.paymentProvider==="none"&&(h.credits=!1);for(let f of je){if(h.deploymentTarget!==f.target)continue;let S=h.databaseProvider===f.provider?"database":"cache";if(h.databaseProvider===f.provider||h.cacheProvider===f.provider)throw new Error(`Incompatible: --deploy ${f.target} + --${S} ${f.provider}. ${f.reason}`)}for(let f of Ve)if(h.architecture===f.architecture&&h.deploymentTarget===f.target)throw new Error(`Incompatible: --architecture ${f.architecture} + --deploy ${f.target}. ${f.reason}`);return h}function Ht(e,t,r){if(e.trim()==="")return[];let n=e.split(",").map(o=>o.trim()).filter(Boolean),i=n.filter(o=>!t.includes(o));if(i.length>0)throw new Error(`Invalid ${r}(s): ${i.join(", ")}. Valid values: ${t.join(", ")}`);return n}import Qo from"picocolors";var es="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";function ts(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function Tn(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new V("--frontend <type>","frontend framework").choices([...Me])).addOption(new V("--architecture <type>","fullstack or separate").choices([...et])).addOption(new V("--payment <provider>","payment provider").choices([...tt])).addOption(new V("--email <provider>","email provider").choices([...rt])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new V("--billing-scope <scope>","billing scope (requires --org)").choices([...ot])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new V("--currency <code>","default currency for billing").choices([...ae])).addOption(new V("--deploy <target>","deployment target").choices([...ce])).addOption(new V("--database <provider>","database provider").choices([...le])).addOption(new V("--cache <provider>","cache provider").choices([...pe])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new V("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new V("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,r)=>{await rs(t?{...r,apiKey:t}:r)})}async function rs(e){let t=performance.now();Zt("1.12.0");let r,n;try{r=bn(e),n=ts(e.templateVersion)}catch(u){E.cancel(I(u)),process.exit(1)}let i=E.spinner(),o;try{o=await Ae({apiKey:e.apiKey,prompt:!e.yes})}catch(u){E.cancel(I(u)),process.exit(1)}e.demo&&Mt(o)!==es&&(E.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let s=X(o),a=async()=>{let u=await re(s),b=u.latest,H=n??b;if(n&&!u.versions.some(Y=>Y.version===H))throw new Error(`Template version "${n}" is not available.`);return{latestVersion:b,selectedVersion:H}};i.start("Verifying access...");let d,y;try{({latestVersion:d,selectedVersion:y}=await a()),i.stop("Access verified."),ue(o)}catch(u){if(i.stop("Access verification failed."),u instanceof R&&u.status===401){e.yes&&(E.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),E.log.warning("Invalid API key."),o=await Ge(),s=X(o),i.start("Verifying access...");try{({latestVersion:d,selectedVersion:y}=await a()),i.stop("Access verified."),ue(o)}catch(b){i.stop("Access verification failed."),E.cancel(b instanceof R&&b.status===401?"Invalid API key.":I(b)),process.exit(1)}}else E.cancel(I(u)),process.exit(1)}E.log.success(`Latest version: ${d}`),y!==d&&E.log.success(`Using template version: ${y}`);let h;e.yes?h=An(r):h=await tr(r);let f;i.start("Activating license...");try{let u=crypto.randomUUID(),b=()=>({frontend:h.frontend,version:y,installId:u,projectName:h.projectName,options:sr(h)}),H;try{H=await Pt(s,b())}catch(Y){let J=dt(Y);if(!J?.lastAllowedVersion)throw Y;i.stop("License activation failed."),e.yes&&(E.cancel(`${J.message} Re-run with --template-version ${J.lastAllowedVersion}.`),process.exit(1));let we=await E.confirm({message:`Your update window has ended. Continue with v${J.lastAllowedVersion} (the last version your license covers)?`});(E.isCancel(we)||!we)&&(E.cancel("Setup cancelled."),process.exit(0)),y=J.lastAllowedVersion,i.start(`Activating license for v${y}...`),H=await Pt(s,b())}f={token:H.token,keyHash:Mt(o),installId:u},i.stop("License activated.")}catch(u){i.stop("License activation failed."),E.cancel(I(u)),process.exit(1)}let S=Zo(h.projectDir);if(Jo(S)&&Wo(S).length>0)if(e.yes)E.log.info(`Directory ${S} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let b=await E.select({message:`Directory ${S} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(E.isCancel(b)||b==="cancel")&&(E.cancel("Setup cancelled."),process.exit(0)),b==="overwrite"&&qo(S,{recursive:!0,force:!0})}let k={...h,projectDir:S,version:y,...e.demo?{docs:!1}:{}};i.start("Downloading template...");try{await ut(s,y,S),i.stop("Template downloaded.")}catch(u){i.stop("Download failed."),E.cancel(I(u)),process.exit(1)}let ie;i.start("Generating project files...");try{if({dockerComposeGenerated:ie}=await St(k),!e.demo){let u=await xe(S);await l(Xo(S,lt),JSON.stringify(u,null,"	")+`
+`),j.yellow("Deployment"))}function Ho(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function Yo(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy       # Deploy to Vercel"}}function bn(e){let t={};if(e.name!==void 0){if(!ct(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Me.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Me.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=Ht(e.docker,nt,"docker service")),e.aiTools!==void 0&&(t.aiTools=Ht(e.aiTools,it,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=Ht(e.socialProviders,st,"social provider")),e.currency!==void 0){if(!ae.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${ae.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!ce.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${ce.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!le.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${le.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!pe.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${pe.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let r=e.baseUrl.trim();if(r==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let n;try{n=new URL(r)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${n.protocol}//${n.host}`}return t}var ne={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function An(e){let t=e.projectName??ne.projectName,r=e.projectDir??`./${t}`,n=e.appName??at(t),i=e.deploymentTarget??ne.deploymentTarget,o=B[i]?.edgeRuntime??!1,s=e.databaseProvider??(o?"neon":ne.databaseProvider),a=e.cacheProvider??(o?"upstash":ne.cacheProvider),d=e.emailProvider??(o?"resend":ne.emailProvider),y=e.dockerServices??(o?ne.dockerServices.filter(f=>f!=="postgres"&&f!=="redis"):ne.dockerServices),h={...ne,...e,projectName:t,appName:n,projectDir:r,deploymentTarget:i,databaseProvider:s,cacheProvider:a,emailProvider:d,dockerServices:y};h.paymentProvider==="none"&&(h.credits=!1);for(let f of je){if(h.deploymentTarget!==f.target)continue;let S=h.databaseProvider===f.provider?"database":"cache";if(h.databaseProvider===f.provider||h.cacheProvider===f.provider)throw new Error(`Incompatible: --deploy ${f.target} + --${S} ${f.provider}. ${f.reason}`)}for(let f of Ve)if(h.architecture===f.architecture&&h.deploymentTarget===f.target)throw new Error(`Incompatible: --architecture ${f.architecture} + --deploy ${f.target}. ${f.reason}`);return h}function Ht(e,t,r){if(e.trim()==="")return[];let n=e.split(",").map(o=>o.trim()).filter(Boolean),i=n.filter(o=>!t.includes(o));if(i.length>0)throw new Error(`Invalid ${r}(s): ${i.join(", ")}. Valid values: ${t.join(", ")}`);return n}import Qo from"picocolors";var es="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";function ts(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function Tn(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new V("--frontend <type>","frontend framework").choices([...Me])).addOption(new V("--architecture <type>","fullstack or separate").choices([...et])).addOption(new V("--payment <provider>","payment provider").choices([...tt])).addOption(new V("--email <provider>","email provider").choices([...rt])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new V("--billing-scope <scope>","billing scope (requires --org)").choices([...ot])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new V("--currency <code>","default currency for billing").choices([...ae])).addOption(new V("--deploy <target>","deployment target").choices([...ce])).addOption(new V("--database <provider>","database provider").choices([...le])).addOption(new V("--cache <provider>","cache provider").choices([...pe])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new V("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new V("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,r)=>{await rs(t?{...r,apiKey:t}:r)})}async function rs(e){let t=performance.now();Zt("1.12.1");let r,n;try{r=bn(e),n=ts(e.templateVersion)}catch(u){E.cancel(I(u)),process.exit(1)}let i=E.spinner(),o;try{o=await Ae({apiKey:e.apiKey,prompt:!e.yes})}catch(u){E.cancel(I(u)),process.exit(1)}e.demo&&Mt(o)!==es&&(E.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let s=X(o),a=async()=>{let u=await re(s),b=u.latest,H=n??b;if(n&&!u.versions.some(Y=>Y.version===H))throw new Error(`Template version "${n}" is not available.`);return{latestVersion:b,selectedVersion:H}};i.start("Verifying access...");let d,y;try{({latestVersion:d,selectedVersion:y}=await a()),i.stop("Access verified."),ue(o)}catch(u){if(i.stop("Access verification failed."),u instanceof R&&u.status===401){e.yes&&(E.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),E.log.warning("Invalid API key."),o=await Ge(),s=X(o),i.start("Verifying access...");try{({latestVersion:d,selectedVersion:y}=await a()),i.stop("Access verified."),ue(o)}catch(b){i.stop("Access verification failed."),E.cancel(b instanceof R&&b.status===401?"Invalid API key.":I(b)),process.exit(1)}}else E.cancel(I(u)),process.exit(1)}E.log.success(`Latest version: ${d}`),y!==d&&E.log.success(`Using template version: ${y}`);let h;e.yes?h=An(r):h=await tr(r);let f;i.start("Activating license...");try{let u=crypto.randomUUID(),b=()=>({frontend:h.frontend,version:y,installId:u,projectName:h.projectName,options:sr(h)}),H;try{H=await Pt(s,b())}catch(Y){let J=dt(Y);if(!J?.lastAllowedVersion)throw Y;i.stop("License activation failed."),e.yes&&(E.cancel(`${J.message} Re-run with --template-version ${J.lastAllowedVersion}.`),process.exit(1));let we=await E.confirm({message:`Your update window has ended. Continue with v${J.lastAllowedVersion} (the last version your license covers)?`});(E.isCancel(we)||!we)&&(E.cancel("Setup cancelled."),process.exit(0)),y=J.lastAllowedVersion,i.start(`Activating license for v${y}...`),H=await Pt(s,b())}f={token:H.token,keyHash:Mt(o),installId:u},i.stop("License activated.")}catch(u){i.stop("License activation failed."),E.cancel(I(u)),process.exit(1)}let S=Zo(h.projectDir);if(Jo(S)&&Wo(S).length>0)if(e.yes)E.log.info(`Directory ${S} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let b=await E.select({message:`Directory ${S} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(E.isCancel(b)||b==="cancel")&&(E.cancel("Setup cancelled."),process.exit(0)),b==="overwrite"&&qo(S,{recursive:!0,force:!0})}let k={...h,projectDir:S,version:y,...e.demo?{docs:!1}:{}};i.start("Downloading template...");try{await ut(s,y,S),i.stop("Template downloaded.")}catch(u){i.stop("Download failed."),E.cancel(I(u)),process.exit(1)}let ie;i.start("Generating project files...");try{if({dockerComposeGenerated:ie}=await St(k),!e.demo){let u=await xe(S);await l(Xo(S,lt),JSON.stringify(u,null,"	")+`
 `),await dn(S,S)}await fn(S,k.aiTools),await ln(k,f),i.stop("Project files generated.")}catch(u){i.stop("Generation failed."),E.cancel(I(u)),process.exit(1)}await hn(S);let x=await yn(S);x&&k.demo!==!0&&e.dbMigration!==!1&&await vn(S),await Sn(S),x&&await En(S);let $=ye("docker"),Z=kt(k).map(u=>u.key).filter(u=>!k.credentials?.[u]);wn(k,{pnpmInstalled:x,dockerComposeGenerated:ie,dockerAvailable:$,skippedCredentials:Z}),Qt(),E.log.info(Qo.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as In}from"fs";import{readFile as Pn}from"fs/promises";import{join as Ye,resolve as as}from"path";import*as _ from"@clack/prompts";import Ce from"picocolors";import{mkdtemp as ns,rm as is}from"fs/promises";import{tmpdir as os}from"os";import{join as ss}from"path";async function Yt(e,t,r,n){let i=await ns(ss(os(),"generatesaas-stage-"));try{await ut(e,t,i),await St({...r,projectDir:i}),await Ft(i,n)}finally{await is(i,{recursive:!0,force:!0})}}function kn(e){let r=(e.startsWith("v")?e.slice(1):e).match(/^(\d+)\.(\d+)\.(\d+)$/);return r?[Number(r[1]),Number(r[2]),Number(r[3])]:null}function wt(e,t){let r=kn(e),n=kn(t);if(!r||!n)return 0;for(let i=0;i<3;i++)if(r[i]!==n[i])return r[i]-n[i];return 0}function _n(e){e.command("update").description("Update AI skill files and stage template updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=as(t.cwd??process.cwd()),n=Ye(r,Q),i;try{i=JSON.parse(await Pn(n,"utf-8"))}catch{_.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o;try{o=await Ae()}catch(d){_.cancel(I(d)),process.exit(1)}let s=X(o),a=_.spinner();try{a.start("Verifying access...");let d;try{d=await re(s)}catch(u){throw u instanceof R&&u.status===401?new Error("Your saved API key was rejected. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):u}a.stop("Access verified."),ue(o),a.start("Fetching latest skill files...");let y=await or(s,d.latest);await Kt(r,y.skillMd,y.scripts,i.aiTools);let h=Gt(i.aiTools);if(a.stop("Skills updated."),_.log.success(`Skill files installed to ${Ce.cyan(h.length.toString())} locations.`),i.version===d.latest){_.log.info(`Already on the latest version (${i.version}).`);return}if(i.licenseToken)try{let u=await ar(s,{currentToken:i.licenseToken,newVersion:d.latest});i.licenseToken=u.token,u.licenseKeyHash&&(i.licenseKeyHash=u.licenseKeyHash),await l(n,JSON.stringify(i,null,"	")+`
 `),_.log.success("License refreshed.")}catch(u){let b=dt(u);b&&(_.cancel(b.message),process.exit(1)),_.log.warn("License refresh skipped.")}let f=cn(i,r),S=Ye(r,nr);a.start(`Staging v${d.latest} (shaped for your config)...`),await Yt(s,d.latest,f,S),a.stop("Template staged.");let{text:k,title:ie}=await cs(s,d,i.version);k&&_.note(k,ie);let x=Ye(r,lt),$=Ye(r,pt),Ee=!In($),Z=!In(x);if(Ee){if(a.start("Building baseline template (one-time migration)..."),await Yt(s,i.version,f,$),Z){let u=await xe($);await l(x,JSON.stringify(u,null,"	")+`
 `)}if(a.stop("Baseline template stored."),!Z){let u=await ls(x,$);u>0&&_.log.warn(`Rebuilt baseline differs from the original for ${u} file(s) (the CLI's shaping evolved since this project was scaffolded). Classification still follows the committed template-hashes.json; upstream diffs for those files may include unrelated noise.`)}}else if(Z){a.start("Computing baseline template hashes...");let u=await xe($);await l(x,JSON.stringify(u,null,"	")+`
@@ -1141,13 +1141,13 @@ ${a??"_No changelog available for this release._"}`)}return{text:o.join(`
 `),title:`Changelog v${r} \u2192 v${n}`}}async function ls(e,t){let r=JSON.parse(await Pn(e,"utf-8")),n=await xe(t),i=0;for(let[o,s]of Object.entries(r))Te(o)||n[o]!==s&&i++;for(let o of Object.keys(n))o in r||i++;return i}import*as L from"@clack/prompts";import M from"picocolors";import{readFile as ps}from"fs/promises";import{join as ds,resolve as us}from"path";function Rn(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=us(t.cwd??process.cwd()),n=ds(r,Q),i;try{i=JSON.parse(await ps(n,"utf-8"))}catch{L.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o=[`Version:       ${M.cyan(i.version)}`,`Frontend:      ${M.cyan(i.frontend)}`,i.deploymentTarget?`Deploy target: ${M.cyan(i.deploymentTarget)}`:null,i.databaseProvider?`Database:      ${M.cyan(i.databaseProvider)}`:null,i.cacheProvider?`Cache:         ${M.cyan(i.cacheProvider)}`:null,i.aiTools&&i.aiTools.length>0?`AI tools:      ${M.cyan(i.aiTools.join(", "))}`:null].filter(Boolean).join(`
 `);L.note(o,M.bold("Project Status"));let s=L.spinner();s.start("Checking for updates...");try{let a=await Ae(),d=X(a),h=(await re(d)).latest;i.version===h?(s.stop("Up to date."),L.log.success(`Already on the latest version (${M.green(h)})`)):(s.stop("Update available."),L.log.warning(`Update available: ${M.yellow(i.version)} \u2192 ${M.green(h)}`),L.log.info(`Open this project in your AI coding agent and ask it to ${M.cyan("update my GenerateSaaS project")} - it fetches and applies the update for you.`))}catch(a){s.stop("Check failed."),a instanceof R&&a.status===401?L.log.warning("Invalid API key. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):L.log.warning(`Could not check for updates: ${I(a)}`)}})}import{readFile as ms}from"fs/promises";import*as T from"@clack/prompts";import A from"picocolors";function fs(){return process.env.GENERATESAAS_API_KEY??Be()}function gs(e){return{verdict:e.verdict,plan:e.license?.plan??e.domainInstalls.find(t=>t.ownerPlan)?.ownerPlan??null,mismatchDomain:e.install?.domain??null,ejectedAt:e.install?.ejectedAt??e.domainInstalls.find(t=>t.ejectedAt)?.ejectedAt??null}}function hs(e){return{verdict:e.verdict??"unknown",ejectedAt:e.ejectedAt??null}}function ys(e){switch(e.verdict){case"licensed":return T.log.success(`${A.green("LICENSED")} - resolves to an account with an active${e.plan?` ${e.plan}`:""} license.`),!0;case"ejected":return T.log.success(`${A.green("EJECTED")} - a licensed buyer opted this install out of telemetry${e.ejectedAt?` on ${e.ejectedAt.slice(0,10)}`:""}. The site is legitimate.`),!0;case"revoked":return T.log.error(`${A.red("REVOKED")} - the owning account no longer holds a plan (refund or chargeback). This deployment is no longer licensed.`),!1;case"token_domain_mismatch":return T.log.error(`${A.red("LEAKED TOKEN")} - this license belongs to a different deployment${e.mismatchDomain?` (${A.cyan(e.mismatchDomain)})`:""}, not this site. The token was copied from a licensed project.`),!1;case"no_license_history":return T.log.error(`${A.red("NO LICENSE HISTORY")} - no license has ever been associated with this site. If it runs GenerateSaaS, treat it as unlicensed.`),!1;default:return T.log.warn(`${A.yellow("UNKNOWN")} - could not cross-reference the records right now. Try again shortly.`),!1}}async function On(e,t){let r=process.env.GENERATESAAS_API_URL??Fe,n=fs();e.start("Cross-referencing license records...");try{let i=n?gs(await cr(r,n,{lkh:t.lkh,nid:t.nid,domain:t.domain})):hs(await _t(r,{token:t.token,domain:t.domain}));return e.stop(`${A.green("Checked")} - records cross-referenced`),ys(i)}catch(i){return e.stop(`${A.yellow("Skipped")} - ${I(i)}`),null}}function vs(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let r=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(r)}function Jt(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function xn(e){T.note([`License ID:    ${A.cyan(String(e.lid??"unknown"))}`,`Version:       ${A.cyan(String(e.ver??"unknown"))}`,`Init version:  ${String(e.iver??"unknown")}`,`Frontend:      ${String(e.fe??"unknown")}`,`Created:       ${Jt(e.pat)}`,`Last updated:  ${Jt(e.uat)}`,`Expires:       ${Jt(e.exp)}`,`Install ID:    ${String(e.nid??"unknown")}`].join(`
 `),A.yellow("License Details"))}function Ss(e){let r=(/^https?:\/\//i.test(e)?e:`https://${e}`).replace(/\/+$/,"");if(r.endsWith("/api"))return[`${r}/license`];try{if(new URL(r).pathname!=="/")return[`${r}/license`]}catch{return[`${r}/license`]}return[`${r}/api/license`,`${r}/license`]}async function Dn(e){let t=T.spinner(),r=null,n="no candidates";for(let s of Ss(e)){t.start(`Checking ${s}...`);try{let a=await fetch(s);if(!a.ok){n=`${s} returned ${a.status}`,t.stop(`${A.yellow("Not here")} - ${n}`);continue}let d=(await a.text()).trim();if(!d||d.split(".").length!==3){n=`${s} did not return a JWT`,t.stop(`${A.yellow("Not here")} - ${n}`);continue}r=d,t.stop(`${A.green("Found")} - license endpoint responded`);break}catch(a){n=`${s}: ${I(a)}`,t.stop(`${A.yellow("Unreachable")} - ${n}`)}}if(r===null){T.log.warn(`No license endpoint found (last: ${n}). The site may be ejected, not a GenerateSaaS app, or serving its API elsewhere.`);let s=Cn(e);return s?await On(t,{domain:s})??!1:!1}let i;try{i=vs(r)}catch{return T.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let s=process.env.GENERATESAAS_API_URL??Fe,a=await _t(s,{token:r});if(a.valid)t.stop(`${A.green("Valid")} - signature verified`);else return t.stop(`${A.red("Invalid")} - ${a.reason}`),!1}catch{return t.stop(`${A.yellow("Skipped")} - could not reach verification service`),T.log.warn("Signature not verified. Displaying unverified claims:"),xn(i),!1}return xn(i),await On(t,{token:r,lkh:typeof i.lkh=="string"?i.lkh:void 0,nid:typeof i.nid=="string"?i.nid:void 0,domain:Cn(e)})??!0}function Cn(e){try{return new URL(/^https?:\/\//i.test(e)?e:`https://${e}`).hostname}catch{return}}function Nn(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com or https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,r)=>{if(!t&&!r.file&&(T.cancel("Provide a URL or --file <path>."),process.exit(1)),r.file){let i=(await ms(r.file,"utf-8")).split(`
-`).map(s=>s.trim()).filter(s=>s&&!s.startsWith("#"));i.length===0&&(T.cancel("No URLs found in file."),process.exit(1));let o=0;for(let s of i)await Dn(s)&&o++,T.log.info("");T.log.success(`${o}/${i.length} sites verified.`)}else await Dn(t)||process.exit(1)})}import{existsSync as Es,rmSync as ws}from"fs";import*as F from"@clack/prompts";function Ln(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Es(q)?(ws(q),F.log.success("API key removed.")):F.log.info("No API key configured.");return}let r=Be();r?F.log.info(`Current API key: ****${r.slice(-4)}`):F.log.info("No API key configured.");let n=await Ge(),i=X(n),o=F.spinner();o.start("Verifying API key...");try{await re(i),o.stop("API key verified."),ue(n),F.log.success("API key saved.")}catch(s){o.stop("Verification failed."),s instanceof R&&s.status===401?F.cancel("Invalid API key."):F.cancel(I(s)),process.exit(1)}})}import{existsSync as bt,rmSync as bs,readFileSync as qt,writeFileSync as $n}from"fs";import{join as ve}from"path";import*as O from"@clack/prompts";var As=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Ts=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat";
+`).map(s=>s.trim()).filter(s=>s&&!s.startsWith("#"));i.length===0&&(T.cancel("No URLs found in file."),process.exit(1));let o=0;for(let s of i)await Dn(s)&&o++,T.log.info("");T.log.success(`${o}/${i.length} sites verified.`)}else await Dn(t)||process.exit(1)})}import{existsSync as Es,rmSync as ws}from"fs";import*as F from"@clack/prompts";function Ln(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Es(q)?(ws(q),F.log.success("API key removed.")):F.log.info("No API key configured.");return}let r=Be();r?F.log.info(`Current API key: ****${r.slice(-4)}`):F.log.info("No API key configured.");let n=await Ge(),i=X(n),o=F.spinner();o.start("Verifying API key...");try{await re(i),o.stop("API key verified."),ue(n),F.log.success("API key saved.")}catch(s){o.stop("Verification failed."),s instanceof R&&s.status===401?F.cancel("Invalid API key."):F.cancel(I(s)),process.exit(1)}})}import{existsSync as bt,rmSync as bs,readFileSync as qt,writeFileSync as $n}from"fs";import{join as ve}from"path";import*as O from"@clack/prompts";var As=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/cron-spread.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Ts=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat";
 `,`	licenseHeartbeatFunction,
 `]},{file:"packages/api/src/routes/internal/index.ts",removals:[`import licenseRoutes from "./license";
 `,`	.route("/license", licenseRoutes)
 `]}];function ks(e){return(e&&e.length>0?e.map(r=>He[r]):Object.values(He)).map(r=>ve(r,Bt))}function Wt(e){return bt(e)?(bs(e,{recursive:!0}),!0):!1}function Is(e,t){if(!bt(e))return!1;let r=qt(e,"utf-8"),n=r;for(let i of t)n=n.replace(i,"");return n===r?!1:($n(e,n,"utf-8"),!0)}function Ps(e){let t=ve(e,".gitignore");if(!bt(t))return!1;let r=qt(t,"utf-8"),n=r.split(`
 `).filter(i=>!i.includes(".generatesaas")).join(`
-`);return n===r?!1:($n(t,n,"utf-8"),!0)}function Un(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=ve(t,Q),n;try{n=JSON.parse(qt(r,"utf-8"))}catch{O.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let i=await O.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(O.isCancel(i)&&(O.cancel("Eject cancelled."),process.exit(0)),n.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${n.licenseToken}`},body:JSON.stringify({event:"eject",version:n.version,frontend:n.frontend}),signal:AbortSignal.timeout(5e3)}),O.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{O.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let o=[],s=[];for(let a of ks(n.aiTools))Wt(ve(t,a))&&o.push(a);for(let a of As)Wt(ve(t,a))&&o.push(a);Wt(ve(t,U))&&o.push(U+"/");for(let a of Ts){let d=ve(t,a.file);Is(d,a.removals)?s.push(a.file):bt(d)&&O.log.warn(`Could not auto-modify ${a.file} - manually remove license/heartbeat references.`)}Ps(t)&&s.push(".gitignore");for(let a of o)O.log.info(`Deleted ${a}`);for(let a of s)O.log.info(`Modified ${a}`);O.log.success("Ejected successfully. This project is now fully standalone.")})}var Se=new _s().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.12.0").addHelpText("after",`
+`);return n===r?!1:($n(t,n,"utf-8"),!0)}function Un(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=ve(t,Q),n;try{n=JSON.parse(qt(r,"utf-8"))}catch{O.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let i=await O.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(O.isCancel(i)&&(O.cancel("Eject cancelled."),process.exit(0)),n.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${n.licenseToken}`},body:JSON.stringify({event:"eject",version:n.version,frontend:n.frontend}),signal:AbortSignal.timeout(5e3)}),O.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{O.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let o=[],s=[];for(let a of ks(n.aiTools))Wt(ve(t,a))&&o.push(a);for(let a of As)Wt(ve(t,a))&&o.push(a);Wt(ve(t,U))&&o.push(U+"/");for(let a of Ts){let d=ve(t,a.file);Is(d,a.removals)?s.push(a.file):bt(d)&&O.log.warn(`Could not auto-modify ${a.file} - manually remove license/heartbeat references.`)}Ps(t)&&s.push(".gitignore");for(let a of o)O.log.info(`Deleted ${a}`);for(let a of s)O.log.info(`Modified ${a}`);O.log.success("Ejected successfully. This project is now fully standalone.")})}var Se=new _s().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.12.1").addHelpText("after",`
 Examples:
   $ generatesaas init                  Interactive setup
   $ generatesaas init -n my-app -y     Quick setup with defaults

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "generatesaas",
-  "version": "1.12.0",
+  "version": "1.12.1",
   "type": "module",
   "description": "CLI for scaffolding and managing GenerateSaaS projects",
   "bin": {