generatesaas 1.13.1 → 1.14.0

package/dist/index.js

@@ -982,7 +982,8 @@ ${e.cacheProvider==="upstash"?`	UPSTASH_REDIS_REST_URL: z.string(),
 	STORAGE_ENDPOINT: z.string().optional(),
 	STORAGE_ACCESS_KEY_ID: z.string().optional(),
 	STORAGE_SECRET_ACCESS_KEY: z.string().optional(),
-	STORAGE_BUCKET_NAME: z.string().optional(),
+	STORAGE_PUBLIC_BUCKET: z.string().optional(),
+	STORAGE_PRIVATE_BUCKET: z.string().optional(),
 	STORAGE_PUBLIC_URL: z.string().optional(),
 	STORAGE_FORCE_PATH_STYLE: z
 		.string()
@@ -1129,7 +1130,8 @@ ${i}    env:
       STORAGE_ENDPOINT: http://test
       STORAGE_ACCESS_KEY_ID: test
       STORAGE_SECRET_ACCESS_KEY: test
-      STORAGE_BUCKET_NAME: test
+      STORAGE_PUBLIC_BUCKET: test-public
+      STORAGE_PRIVATE_BUCKET: test-private
     steps:
       - uses: actions/checkout@v6
       - uses: ./.github/actions/setup
@@ -1155,7 +1157,7 @@ export { ops } from "./${r}/index";
 ${f}`:s.message))}else i()})})}async function wn(e){if(!ve("pnpm"))return _.log.warn("pnpm not found. Skipping lockfile regeneration."),!1;try{return await ye("pnpm",["install","--lockfile-only","--no-frozen-lockfile","--config.minimumReleaseAge=0"],e),!0}catch(t){let r=t instanceof Error?t.message:String(t);return _.log.warn(`Lockfile regeneration failed: ${r}`),_.log.warn("Deploys using --frozen-lockfile may fail."),!1}}async function bn(e){if(!ve("pnpm"))return _.log.warn("pnpm not found. Skipping dependency installation."),_.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=_.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await ye("pnpm",["install","--config.minimumReleaseAge=0"],e),t.stop("Dependencies installed."),!0}catch(r){t.stop("Dependency installation failed.");let n=r instanceof Error?r.message:String(r);return _.log.warn(`pnpm install failed: ${n}`),_.log.warn("You can run it manually later."),!1}}async function kn(e){if(!ve("pnpm"))return!1;let t=_.spinner();t.start("Generating baseline database migration...");try{return await ye("pnpm",["-F","@repo/database","generate"],e),t.stop("Baseline migration generated."),!0}catch(r){t.stop("Baseline migration generation failed.");let n=r instanceof Error?r.message:String(r);return _.log.warn(`Could not generate baseline migration: ${n}`),_.log.warn("Run 'pnpm -F @repo/database generate' before your first deploy."),!1}}async function An(e){try{return await En(Yt(e,".git")),_.log.info("Git repository already exists, skipping init."),!0}catch{}if(!ve("git"))return _.log.warn("git not found. Skipping repository initialization."),!1;let t=_.spinner();t.start("Initializing git repository...");try{return await ye("git",["init"],e),await ye("git",["add","-A"],e),await ye("git",["commit","--no-verify","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),_.log.warn("You can run git init manually later."),!1}}async function Tn(e){if(!ve("pnpm"))return!1;try{await En(Yt(e,".git"))}catch{return!1}try{let t=JSON.parse(await qo(Yt(e,"package.json"),"utf-8")),r=!!t.devDependencies?.["simple-git-hooks"],n=!!t["simple-git-hooks"];if(!r||!n)return!1}catch{return!1}try{return await ye("pnpm",["exec","simple-git-hooks"],e),!0}catch{return _.log.warn("Could not install git hooks. Run 'pnpm exec simple-git-hooks' manually."),!1}}import*as Ce from"@clack/prompts";import M from"picocolors";function In(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&Ce.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let r=[];if(r.push(`cd ${e.projectDir}`),t.pnpmInstalled||r.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(s=>ke[s].label).join(", ");r.push(`pnpm infra         ${M.dim(`# ${o}`)}`)}if(r.push(`pnpm dev           ${M.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(r.push(""),r.push(M.dim("Fill in remaining TODO values in .env"))),Ce.note(r.join(`
 `),M.yellow("Start Development")),t.dockerComposeGenerated){let o=[];o.push(`App          ${M.cyan("http://localhost:3000")}`),e.architecture==="separate"&&o.push(`API          ${M.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&o.push(`Mailpit      ${M.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&o.push(`Inngest      ${M.cyan("http://localhost:8288")}`),Ce.note(o.join(`
 `),M.yellow("Dev Tools"))}let n=[],i=Xo(e);i.length>0&&n.push(`Set in production: ${M.dim(i.join(", "))}`),n.push("pnpm db:push       # Run database migrations"),n.push(Zo(e)),Ce.note(n.join(`
-`),M.yellow("Deployment"))}function Xo(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function Zo(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy       # Deploy to Vercel"}}function Pn(e){let t={};if(e.name!==void 0){if(!ct(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Fe.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Fe.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.desktop!==void 0&&(t.desktop=e.desktop),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=Jt(e.docker,nt,"docker service")),e.aiTools!==void 0&&(t.aiTools=Jt(e.aiTools,it,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=Jt(e.socialProviders,st,"social provider")),e.currency!==void 0){if(!le.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${le.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!pe.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${pe.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!de.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${de.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!ue.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${ue.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let r=e.baseUrl.trim();if(r==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let n;try{n=new URL(r)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${n.protocol}//${n.host}`}return t}var ie={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,desktop:!1,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function _n(e){let t=e.projectName??ie.projectName,r=e.projectDir??`./${t}`,n=e.appName??at(t),i=e.deploymentTarget??ie.deploymentTarget,o=z[i]?.edgeRuntime??!1,s=e.databaseProvider??(o?"neon":ie.databaseProvider),a=e.cacheProvider??(o?"upstash":ie.cacheProvider),d=e.emailProvider??(o?"resend":ie.emailProvider),h=e.dockerServices??(o?ie.dockerServices.filter(f=>f!=="postgres"&&f!=="redis"):ie.dockerServices),y={...ie,...e,projectName:t,appName:n,projectDir:r,deploymentTarget:i,databaseProvider:s,cacheProvider:a,emailProvider:d,dockerServices:h};y.paymentProvider==="none"&&(y.credits=!1);for(let f of Ve){if(y.deploymentTarget!==f.target)continue;let S=y.databaseProvider===f.provider?"database":"cache";if(y.databaseProvider===f.provider||y.cacheProvider===f.provider)throw new Error(`Incompatible: --deploy ${f.target} + --${S} ${f.provider}. ${f.reason}`)}for(let f of Me)if(y.architecture===f.architecture&&y.deploymentTarget===f.target)throw new Error(`Incompatible: --architecture ${f.architecture} + --deploy ${f.target}. ${f.reason}`);return y}function Jt(e,t,r){if(e.trim()==="")return[];let n=e.split(",").map(o=>o.trim()).filter(Boolean),i=n.filter(o=>!t.includes(o));if(i.length>0)throw new Error(`Invalid ${r}(s): ${i.join(", ")}. Valid values: ${t.join(", ")}`);return n}import is from"picocolors";var os="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";function ss(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function Rn(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new F("--frontend <type>","frontend framework").choices([...Fe])).addOption(new F("--architecture <type>","fullstack or separate").choices([...et])).addOption(new F("--payment <provider>","payment provider").choices([...tt])).addOption(new F("--email <provider>","email provider").choices([...rt])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new F("--billing-scope <scope>","billing scope (requires --org)").choices([...ot])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--desktop","include the Electron desktop app (apps/desktop)").option("--no-desktop","exclude the Electron desktop app").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new F("--currency <code>","default currency for billing").choices([...le])).addOption(new F("--deploy <target>","deployment target").choices([...pe])).addOption(new F("--database <provider>","database provider").choices([...de])).addOption(new F("--cache <provider>","cache provider").choices([...ue])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new F("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new F("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,r)=>{await as(t?{...r,apiKey:t}:r)})}async function as(e){let t=performance.now();er("1.13.1");let r,n;try{r=Pn(e),n=ss(e.templateVersion)}catch(u){E.cancel(P(u)),process.exit(1)}let i=E.spinner(),o;try{o=await Ae({apiKey:e.apiKey,prompt:!e.yes})}catch(u){E.cancel(P(u)),process.exit(1)}e.demo&&Bt(o)!==os&&(E.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let s=Z(o),a=async()=>{let u=await ne(s),b=u.latest,W=n??b;if(n&&!u.versions.some(se=>se.version===W))throw new Error(`Template version "${n}" is not available.`);return{latestVersion:b,selectedVersion:W}};i.start("Verifying access...");let d,h;try{({latestVersion:d,selectedVersion:h}=await a()),i.stop("Access verified."),fe(o)}catch(u){if(i.stop("Access verification failed."),u instanceof x&&u.status===401){e.yes&&(E.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),E.log.warning("Invalid API key."),o=await Ke(),s=Z(o),i.start("Verifying access...");try{({latestVersion:d,selectedVersion:h}=await a()),i.stop("Access verified."),fe(o)}catch(b){i.stop("Access verification failed."),E.cancel(b instanceof x&&b.status===401?"Invalid API key.":P(b)),process.exit(1)}}else E.cancel(P(u)),process.exit(1)}E.log.success(`Latest version: ${d}`),h!==d&&E.log.success(`Using template version: ${h}`);let y;e.yes?y=_n(r):y=await nr(r);let f;i.start("Activating license...");try{let u=crypto.randomUUID(),b=()=>({frontend:y.frontend,version:h,installId:u,projectName:y.projectName,options:cr(y)}),W;try{W=await Rt(s,b())}catch(se){let K=dt(se);if(!K?.lastAllowedVersion)throw se;i.stop("License activation failed."),e.yes&&(E.cancel(`${K.message} Re-run with --template-version ${K.lastAllowedVersion}.`),process.exit(1));let be=await E.confirm({message:`Your update window has ended. Continue with v${K.lastAllowedVersion} (the last version your license covers)?`});(E.isCancel(be)||!be)&&(E.cancel("Setup cancelled."),process.exit(0)),h=K.lastAllowedVersion,i.start(`Activating license for v${h}...`),W=await Rt(s,b())}f={token:W.token,keyHash:Bt(o),installId:u},i.stop("License activated.")}catch(u){i.stop("License activation failed."),E.cancel(P(u)),process.exit(1)}let S=ns(y.projectDir);if(Qo(S)&&es(S).length>0)if(e.yes)E.log.info(`Directory ${S} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let b=await E.select({message:`Directory ${S} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(E.isCancel(b)||b==="cancel")&&(E.cancel("Setup cancelled."),process.exit(0)),b==="overwrite"&&ts(S,{recursive:!0,force:!0})}let I={...y,projectDir:S,version:h,...e.demo?{docs:!1}:{}};i.start("Downloading template...");try{await ut(s,h,S),i.stop("Template downloaded.")}catch(u){i.stop("Download failed."),E.cancel(P(u)),process.exit(1)}let oe;i.start("Generating project files...");try{if({dockerComposeGenerated:oe}=await Et(I),!e.demo){let u=await De(S);await l(rs(S,lt),JSON.stringify(u,null,"	")+`
+`),M.yellow("Deployment"))}function Xo(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function Zo(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy       # Deploy to Vercel"}}function Pn(e){let t={};if(e.name!==void 0){if(!ct(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Fe.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Fe.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.desktop!==void 0&&(t.desktop=e.desktop),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=Jt(e.docker,nt,"docker service")),e.aiTools!==void 0&&(t.aiTools=Jt(e.aiTools,it,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=Jt(e.socialProviders,st,"social provider")),e.currency!==void 0){if(!le.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${le.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!pe.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${pe.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!de.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${de.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!ue.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${ue.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let r=e.baseUrl.trim();if(r==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let n;try{n=new URL(r)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${n.protocol}//${n.host}`}return t}var ie={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,desktop:!1,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function _n(e){let t=e.projectName??ie.projectName,r=e.projectDir??`./${t}`,n=e.appName??at(t),i=e.deploymentTarget??ie.deploymentTarget,o=z[i]?.edgeRuntime??!1,s=e.databaseProvider??(o?"neon":ie.databaseProvider),a=e.cacheProvider??(o?"upstash":ie.cacheProvider),d=e.emailProvider??(o?"resend":ie.emailProvider),h=e.dockerServices??(o?ie.dockerServices.filter(f=>f!=="postgres"&&f!=="redis"):ie.dockerServices),y={...ie,...e,projectName:t,appName:n,projectDir:r,deploymentTarget:i,databaseProvider:s,cacheProvider:a,emailProvider:d,dockerServices:h};y.paymentProvider==="none"&&(y.credits=!1);for(let f of Ve){if(y.deploymentTarget!==f.target)continue;let S=y.databaseProvider===f.provider?"database":"cache";if(y.databaseProvider===f.provider||y.cacheProvider===f.provider)throw new Error(`Incompatible: --deploy ${f.target} + --${S} ${f.provider}. ${f.reason}`)}for(let f of Me)if(y.architecture===f.architecture&&y.deploymentTarget===f.target)throw new Error(`Incompatible: --architecture ${f.architecture} + --deploy ${f.target}. ${f.reason}`);return y}function Jt(e,t,r){if(e.trim()==="")return[];let n=e.split(",").map(o=>o.trim()).filter(Boolean),i=n.filter(o=>!t.includes(o));if(i.length>0)throw new Error(`Invalid ${r}(s): ${i.join(", ")}. Valid values: ${t.join(", ")}`);return n}import is from"picocolors";var os="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";function ss(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function Rn(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new F("--frontend <type>","frontend framework").choices([...Fe])).addOption(new F("--architecture <type>","fullstack or separate").choices([...et])).addOption(new F("--payment <provider>","payment provider").choices([...tt])).addOption(new F("--email <provider>","email provider").choices([...rt])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new F("--billing-scope <scope>","billing scope (requires --org)").choices([...ot])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--desktop","include the Electron desktop app (apps/desktop)").option("--no-desktop","exclude the Electron desktop app").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new F("--currency <code>","default currency for billing").choices([...le])).addOption(new F("--deploy <target>","deployment target").choices([...pe])).addOption(new F("--database <provider>","database provider").choices([...de])).addOption(new F("--cache <provider>","cache provider").choices([...ue])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new F("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new F("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,r)=>{await as(t?{...r,apiKey:t}:r)})}async function as(e){let t=performance.now();er("1.14.0");let r,n;try{r=Pn(e),n=ss(e.templateVersion)}catch(u){E.cancel(P(u)),process.exit(1)}let i=E.spinner(),o;try{o=await Ae({apiKey:e.apiKey,prompt:!e.yes})}catch(u){E.cancel(P(u)),process.exit(1)}e.demo&&Bt(o)!==os&&(E.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let s=Z(o),a=async()=>{let u=await ne(s),b=u.latest,W=n??b;if(n&&!u.versions.some(se=>se.version===W))throw new Error(`Template version "${n}" is not available.`);return{latestVersion:b,selectedVersion:W}};i.start("Verifying access...");let d,h;try{({latestVersion:d,selectedVersion:h}=await a()),i.stop("Access verified."),fe(o)}catch(u){if(i.stop("Access verification failed."),u instanceof x&&u.status===401){e.yes&&(E.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),E.log.warning("Invalid API key."),o=await Ke(),s=Z(o),i.start("Verifying access...");try{({latestVersion:d,selectedVersion:h}=await a()),i.stop("Access verified."),fe(o)}catch(b){i.stop("Access verification failed."),E.cancel(b instanceof x&&b.status===401?"Invalid API key.":P(b)),process.exit(1)}}else E.cancel(P(u)),process.exit(1)}E.log.success(`Latest version: ${d}`),h!==d&&E.log.success(`Using template version: ${h}`);let y;e.yes?y=_n(r):y=await nr(r);let f;i.start("Activating license...");try{let u=crypto.randomUUID(),b=()=>({frontend:y.frontend,version:h,installId:u,projectName:y.projectName,options:cr(y)}),W;try{W=await Rt(s,b())}catch(se){let K=dt(se);if(!K?.lastAllowedVersion)throw se;i.stop("License activation failed."),e.yes&&(E.cancel(`${K.message} Re-run with --template-version ${K.lastAllowedVersion}.`),process.exit(1));let be=await E.confirm({message:`Your update window has ended. Continue with v${K.lastAllowedVersion} (the last version your license covers)?`});(E.isCancel(be)||!be)&&(E.cancel("Setup cancelled."),process.exit(0)),h=K.lastAllowedVersion,i.start(`Activating license for v${h}...`),W=await Rt(s,b())}f={token:W.token,keyHash:Bt(o),installId:u},i.stop("License activated.")}catch(u){i.stop("License activation failed."),E.cancel(P(u)),process.exit(1)}let S=ns(y.projectDir);if(Qo(S)&&es(S).length>0)if(e.yes)E.log.info(`Directory ${S} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let b=await E.select({message:`Directory ${S} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(E.isCancel(b)||b==="cancel")&&(E.cancel("Setup cancelled."),process.exit(0)),b==="overwrite"&&ts(S,{recursive:!0,force:!0})}let I={...y,projectDir:S,version:h,...e.demo?{docs:!1}:{}};i.start("Downloading template...");try{await ut(s,h,S),i.stop("Template downloaded.")}catch(u){i.stop("Download failed."),E.cancel(P(u)),process.exit(1)}let oe;i.start("Generating project files...");try{if({dockerComposeGenerated:oe}=await Et(I),!e.demo){let u=await De(S);await l(rs(S,lt),JSON.stringify(u,null,"	")+`
 `),await hn(S,S)}await Sn(S,I.aiTools),await fn(I,f),i.stop("Project files generated.")}catch(u){i.stop("Generation failed."),E.cancel(P(u)),process.exit(1)}await wn(S);let C=await bn(S);C&&I.demo!==!0&&e.dbMigration!==!1&&await kn(S),await An(S),C&&await Tn(S);let U=ve("docker"),Q=Pt(I).map(u=>u.key).filter(u=>!I.credentials?.[u]);In(I,{pnpmInstalled:C,dockerComposeGenerated:oe,dockerAvailable:U,skippedCredentials:Q}),tr(),E.log.info(is.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as On}from"fs";import{readFile as Dn}from"fs/promises";import{join as Ye,resolve as us}from"path";import*as R from"@clack/prompts";import Ne from"picocolors";import{mkdtemp as cs,rm as ls}from"fs/promises";import{tmpdir as ps}from"os";import{join as ds}from"path";async function Wt(e,t,r,n){let i=await cs(ds(ps(),"generatesaas-stage-"));try{await ut(e,t,i),await Et({...r,projectDir:i}),await Gt(i,n)}finally{await ls(i,{recursive:!0,force:!0})}}function xn(e){let r=(e.startsWith("v")?e.slice(1):e).match(/^(\d+)\.(\d+)\.(\d+)$/);return r?[Number(r[1]),Number(r[2]),Number(r[3])]:null}function bt(e,t){let r=xn(e),n=xn(t);if(!r||!n)return 0;for(let i=0;i<3;i++)if(r[i]!==n[i])return r[i]-n[i];return 0}function Cn(e){e.command("update").description("Update AI skill files and stage template updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=us(t.cwd??process.cwd()),n=Ye(r,ee),i;try{i=JSON.parse(await Dn(n,"utf-8"))}catch{R.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o;try{o=await Ae()}catch(d){R.cancel(P(d)),process.exit(1)}let s=Z(o),a=R.spinner();try{a.start("Verifying access...");let d;try{d=await ne(s)}catch(u){throw u instanceof x&&u.status===401?new Error("Your saved API key was rejected. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):u}a.stop("Access verified."),fe(o),a.start("Fetching latest skill files...");let h=await ar(s,d.latest);await Ht(r,h.skillMd,h.scripts,i.aiTools);let y=zt(i.aiTools);if(a.stop("Skills updated."),R.log.success(`Skill files installed to ${Ne.cyan(y.length.toString())} locations.`),i.version===d.latest){R.log.info(`Already on the latest version (${i.version}).`);return}if(i.licenseToken)try{let u=await lr(s,{currentToken:i.licenseToken,newVersion:d.latest});i.licenseToken=u.token,u.licenseKeyHash&&(i.licenseKeyHash=u.licenseKeyHash),await l(n,JSON.stringify(i,null,"	")+`
 `),R.log.success("License refreshed.")}catch(u){let b=dt(u);b&&(R.cancel(b.message),process.exit(1)),R.log.warn("License refresh skipped.")}let f=mn(i,r),S=Ye(r,or);a.start(`Staging v${d.latest} (shaped for your config)...`),await Wt(s,d.latest,f,S),a.stop("Template staged.");let{text:I,title:oe}=await ms(s,d,i.version);I&&R.note(I,oe);let C=Ye(r,lt),U=Ye(r,pt),we=!On(U),Q=!On(C);if(we){if(a.start("Building baseline template (one-time migration)..."),await Wt(s,i.version,f,U),Q){let u=await De(U);await l(C,JSON.stringify(u,null,"	")+`
 `)}if(a.stop("Baseline template stored."),!Q){let u=await fs(C,U);u>0&&R.log.warn(`Rebuilt baseline differs from the original for ${u} file(s) (the CLI's shaping evolved since this project was scaffolded). Classification still follows the committed template-hashes.json; upstream diffs for those files may include unrelated noise.`)}}else if(Q){a.start("Computing baseline template hashes...");let u=await De(U);await l(C,JSON.stringify(u,null,"	")+`
@@ -1173,7 +1175,7 @@ ${a??"_No changelog available for this release._"}`)}return{text:o.join(`
 `,`	.route("/license", licenseRoutes)
 `]}];function xs(e){return(e&&e.length>0?e.map(r=>He[r]):Object.values(He)).map(r=>Se(r,Kt))}function Xt(e){return kt(e)?(Ps(e,{recursive:!0}),!0):!1}function Os(e,t){if(!kt(e))return!1;let r=Zt(e,"utf-8"),n=r;for(let i of t)n=n.replace(i,"");return n===r?!1:(Fn(e,n,"utf-8"),!0)}function Ds(e){let t=Se(e,".gitignore");if(!kt(t))return!1;let r=Zt(t,"utf-8"),n=r.split(`
 `).filter(i=>!i.includes(".generatesaas")).join(`
-`);return n===r?!1:(Fn(t,n,"utf-8"),!0)}function Bn(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=Se(t,ee),n;try{n=JSON.parse(Zt(r,"utf-8"))}catch{D.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let i=await D.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(D.isCancel(i)&&(D.cancel("Eject cancelled."),process.exit(0)),n.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${n.licenseToken}`},body:JSON.stringify({event:"eject",version:n.version,frontend:n.frontend}),signal:AbortSignal.timeout(5e3)}),D.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{D.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let o=[],s=[];for(let a of xs(n.aiTools))Xt(Se(t,a))&&o.push(a);for(let a of _s)Xt(Se(t,a))&&o.push(a);Xt(Se(t,V))&&o.push(V+"/");for(let a of Rs){let d=Se(t,a.file);Os(d,a.removals)?s.push(a.file):kt(d)&&D.log.warn(`Could not auto-modify ${a.file} - manually remove license/heartbeat references.`)}Ds(t)&&s.push(".gitignore");for(let a of o)D.log.info(`Deleted ${a}`);for(let a of s)D.log.info(`Modified ${a}`);D.log.success("Ejected successfully. This project is now fully standalone.")})}var Ee=new Cs().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.13.1").addHelpText("after",`
+`);return n===r?!1:(Fn(t,n,"utf-8"),!0)}function Bn(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=Se(t,ee),n;try{n=JSON.parse(Zt(r,"utf-8"))}catch{D.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let i=await D.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(D.isCancel(i)&&(D.cancel("Eject cancelled."),process.exit(0)),n.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${n.licenseToken}`},body:JSON.stringify({event:"eject",version:n.version,frontend:n.frontend}),signal:AbortSignal.timeout(5e3)}),D.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{D.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let o=[],s=[];for(let a of xs(n.aiTools))Xt(Se(t,a))&&o.push(a);for(let a of _s)Xt(Se(t,a))&&o.push(a);Xt(Se(t,V))&&o.push(V+"/");for(let a of Rs){let d=Se(t,a.file);Os(d,a.removals)?s.push(a.file):kt(d)&&D.log.warn(`Could not auto-modify ${a.file} - manually remove license/heartbeat references.`)}Ds(t)&&s.push(".gitignore");for(let a of o)D.log.info(`Deleted ${a}`);for(let a of s)D.log.info(`Modified ${a}`);D.log.success("Ejected successfully. This project is now fully standalone.")})}var Ee=new Cs().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.14.0").addHelpText("after",`
 Examples:
   $ generatesaas init                  Interactive setup
   $ generatesaas init -n my-app -y     Quick setup with defaults

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "generatesaas",
-  "version": "1.13.1",
+  "version": "1.14.0",
   "type": "module",
   "description": "CLI for scaffolding and managing GenerateSaaS projects",
   "bin": {