generatesaas 1.19.2 → 1.20.0

package/dist/index.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import{Command as ea}from"commander";import*as no from"@clack/prompts";import{existsSync as vs,readdirSync as bs,rmSync as ks}from"fs";import{join as Ss,resolve as ws}from"path";import{Option as Y}from"commander";import*as E from"@clack/prompts";import*as at from"@clack/prompts";import Dt from"picocolors";function ar(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";at.intro(Dt.bgYellow(Dt.black(t)))}function cr(){at.outro(Dt.yellow("Happy building!"))}import*as h from"@clack/prompts";import y from"picocolors";var qe={nextjs:{label:"Next.js",hint:"React 19 + Next.js 16"},nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"}},Je={fullstack:{label:"Fullstack",hint:"Frontend hosts the API - works on serverless or long-running"},separate:{label:"Separate",hint:"Standalone Hono backend - long-running runtimes only (Docker, Render, Fly.io, Railway, Coolify, Dokploy)"}},ct={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},lt={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},pt={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},Te={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},We={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var ye={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var Q={node:{label:"Node.js / Docker",hint:"long-running runtime - Render, Fly.io, Railway, Coolify, Dokploy, VPS",edgeRuntime:!1},vercel:{label:"Vercel",hint:"serverless functions",edgeRuntime:!0}},F={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},ee={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},Xe=[{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."}],Ze=[{architecture:"separate",target:"vercel",reason:"Standalone backends need a long-running runtime. Vercel's per-function TypeScript check conflicts with pnpm's isolated install. Use --architecture fullstack for serverless, or deploy the standalone backend to a long-running runtime (Render, Fly.io, Railway, Coolify, Dokploy, or your own VPS via Docker)."}],lr=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];function dt(e){let t=F[e.databaseProvider].managed,r=ee[e.cacheProvider].managed;return e.dockerServices.some(n=>!(n==="postgres"&&t||n==="redis"&&r))}var oe={google:{label:"Google",envVars:[{name:"GOOGLE_CLIENT_ID",secret:!1},{name:"GOOGLE_CLIENT_SECRET",secret:!0}]},github:{label:"GitHub",envVars:[{name:"GITHUB_CLIENT_ID",secret:!1},{name:"GITHUB_CLIENT_SECRET",secret:!0}]},facebook:{label:"Facebook",envVars:[{name:"FACEBOOK_CLIENT_ID",secret:!1},{name:"FACEBOOK_CLIENT_SECRET",secret:!0}]},discord:{label:"Discord",envVars:[{name:"DISCORD_CLIENT_ID",secret:!1},{name:"DISCORD_CLIENT_SECRET",secret:!0}]},x:{label:"X",envVars:[{name:"TWITTER_CLIENT_ID",secret:!1},{name:"TWITTER_CLIENT_SECRET",secret:!0}]}};var ve=["nextjs","nuxt"],Re=["fullstack","separate"],_e=["stripe","polar","none"],Oe=["smtp","ses","resend"],xe=["postgres","redis","inngest","mailpit"],De=["claude-code","cursor","codex","gemini-cli","windsurf"],Ce=["user","organization"],ie=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],se=["node","vercel"],ae=["postgres","neon","supabase"],ce=["redis","upstash"],Ne=["google","github","facebook","discord","x"];function ut(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function mt(e){return/^[a-z][a-z0-9-]*$/.test(e)}function x(e){return e instanceof Error?e.message:String(e)}function P(e){h.isCancel(e)&&(h.cancel("Setup cancelled."),process.exit(0))}function Ct(e){let t=[];e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0}));for(let r of e.socialProviders){let n=oe[r];for(let o of n.envVars)t.push({key:o.name,message:`${o.name} (${n.label}, optional):`,secret:o.secret})}return e.demo&&t.push({key:"TURNSTILE_SECRET_KEY",message:"Cloudflare Turnstile secret key (optional):",secret:!0}),t}async function pr(e,t){let r=!1;h.log.info(y.bold("Project"));let n=e?.projectName??await(async()=>{r=!0;let l=await h.text({message:"Project name:",placeholder:"my-saas",validate:d=>{if(!d?.trim())return"Project name is required.";if(!mt(d))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return P(l),l})(),o=e?.appName??await(async()=>{r=!0;let l=await h.text({message:"App name:",initialValue:ut(n),validate:d=>{if(!d?.trim())return"App name is required."}});return P(l),l})(),i=e?.projectDir??await(async()=>{r=!0;let l=await h.text({message:"Project location:",initialValue:`./${n}`});return P(l),l==="."?process.cwd():l})(),s=e?.frontend??await(async()=>{r=!0;let l=Object.keys(qe),d=await h.select({message:"Frontend framework:",options:l.map(k=>({value:k,label:qe[k].label,hint:qe[k].hint}))});return P(d),d})();h.log.info(y.bold("Infrastructure"));let a=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){r=!0;let l=await h.select({message:"Deployment target:",options:se.map(d=>({value:d,label:Q[d].label,hint:Q[d].hint}))});P(l),a=l}let p=e?.architecture?Ze.find(l=>l.architecture===e.architecture&&l.target===a):void 0;if(p)throw new Error(`Incompatible: --architecture ${p.architecture} + --deploy ${p.target}. ${p.reason}`);let f=new Set(Ze.filter(l=>l.target===a).map(l=>l.architecture)),m=Re.filter(l=>!f.has(l)),u=e?.architecture??await(async()=>{if(m.length===1){let d=m[0];return h.log.info(`Auto-selected ${Je[d].label} architecture (only compatible option for ${Q[a].label}).`),d}r=!0;let l=await h.select({message:"Architecture:",options:m.map(d=>({value:d,label:Je[d].label,hint:Je[d].hint}))});return P(l),l})(),v=e?.databaseProvider??await(async()=>{r=!0;let l=ae.filter(k=>!Xe.some(M=>M.target===a&&M.provider===k));if(l.length===1){let k=l[0];return h.log.info(`Auto-selected ${F[k].label} (only compatible option for ${Q[a].label}).`),k}let d=await h.select({message:"Database provider:",options:l.map(k=>({value:k,label:F[k].label,hint:F[k].hint}))});return P(d),d})(),w=e?.cacheProvider??await(async()=>{r=!0;let l=ce.filter(k=>!Xe.some(M=>M.target===a&&M.provider===k));if(l.length===1){let k=l[0];return h.log.info(`Auto-selected ${ee[k].label} (only compatible option for ${Q[a].label}).`),k}let d=await h.select({message:"Cache provider:",options:l.map(k=>({value:k,label:ee[k].label,hint:ee[k].hint}))});return P(d),d})();if(Q[a]?.edgeRuntime){let l=lr.map(d=>`  - ${d}`).join(`
-`);h.note(l,"Unavailable on edge runtime")}h.log.info(y.bold("Features"));let T=e?.paymentProvider??await(async()=>{r=!0;let l=await h.select({message:"Payment provider:",options:_e.map(d=>({value:d,label:ct[d].label,hint:ct[d].hint}))});return P(l),l})(),G=e?.defaultCurrency??await(async()=>{if(T==="none")return"USD";r=!0;let l=await h.select({message:"Default currency:",options:ie.map(d=>({value:d,label:d,hint:ye[d].name}))});return P(l),l})(),L=e?.emailProvider??await(async()=>{r=!0;let l=await h.select({message:"Email provider:",options:Oe.map(d=>({value:d,label:lt[d].label,hint:lt[d].hint}))});return P(l),l})(),W=e?.multiTenancy??await(async()=>{r=!0;let l=await h.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return P(l),l})(),X=e?.billingScope??"user";if(W&&e?.billingScope===void 0){r=!0;let l=await h.select({message:"Billing scope:",options:Ce.map(d=>({value:d,label:pt[d].label,hint:pt[d].hint}))});P(l),X=l}let ne=e?.blog??await(async()=>{r=!0;let l=await h.confirm({message:"Enable blog?",initialValue:!0});return P(l),l})(),b=e?.docs??await(async()=>{r=!0;let l=await h.confirm({message:"Include docs app? (self-hosted Fumadocs documentation site)",initialValue:!1});return P(l),l})(),I=t?.desktopAllowed!==!1,R=e?.desktop??(I?await(async()=>{r=!0;let l=await h.confirm({message:"Include the Electron desktop app? (apps/desktop - cross-platform, device-auth)",initialValue:!1});return P(l),l})():(h.log.info(y.dim("Desktop app: available on the Pro plan and up - skipped.")),!1)),K=R?e?.desktopAutoRelease??await(async()=>{r=!0;let l=await h.select({message:"Desktop release trigger:",options:[{value:!1,label:"Manual only",hint:"run from the Actions tab (saves CI minutes)"},{value:!0,label:"Automatic",hint:"release on every CI success on main"}],initialValue:!1});return P(l),l})():!1,A=e?.revenueSharing??await(async()=>{r=!0;let l=await h.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return P(l),l})(),Z=T==="none"?!1:e?.credits??await(async()=>{r=!0;let l=await h.confirm({message:"Enable credits? (metered usage on top of subscription plans)",initialValue:!0});return P(l),l})(),it=e?.socialProviders??await(async()=>{r=!0;let l=Ne.map(k=>({value:k,label:oe[k].label,hint:`requires ${oe[k].envVars.map(M=>M.name).join(" / ")}`})),d=await h.multiselect({message:"Which social login providers should the sign-in screen show?",options:l,initialValues:[],required:!1});return P(d),d})();h.log.info(y.bold("Tooling"));let _t=e?.dockerServices??await(async()=>{r=!0;let l=[...xe].filter(V=>V!=="mailpit");L==="smtp"&&l.push("mailpit");let d=l.map(V=>({value:V,label:Te[V].label,hint:Te[V].hint})),k=d.map(V=>V.value).filter(V=>!(V==="postgres"&&(v==="neon"||v==="supabase")||V==="redis"&&w==="upstash")),M=await h.multiselect({message:"Which services should we set up in Docker for you?",options:d,initialValues:k,required:!1});return P(M),M})(),Ot=e?.aiTools??await(async()=>{r=!0;let l=De.map(k=>({value:k,label:We[k].label})),d=await h.multiselect({message:"Which AI coding tools do you use?",options:l,initialValues:[],required:!1});return P(d),d})(),xt=e?.demo,st=Ct({databaseProvider:v,cacheProvider:w,paymentProvider:T,emailProvider:L,socialProviders:it,demo:xt}),Ye={};if(st.length>0&&r){h.log.info(y.bold("Credentials")+y.dim("  all optional - press Enter to skip, fill in .env later"));for(let l of st)if(r=!0,l.secret){let d=await h.password({message:l.message,mask:"*"});P(d),typeof d=="string"&&d.trim()&&(Ye[l.key]=d.trim())}else{let d=await h.text({message:l.message,placeholder:l.placeholder});P(d),typeof d=="string"&&d.trim()&&(Ye[l.key]=d.trim())}}if(r){let l=[`  Name:          ${y.cyan(n)}`,`  App name:      ${y.cyan(o)}`,`  Location:      ${y.cyan(i)}`,`  Frontend:      ${y.cyan(qe[s].label)}`,`  Architecture:  ${y.cyan(Je[u].label)}`].join(`
-`),d=[`  Deploy target: ${y.cyan(Q[a]?.label??"Node.js / Docker")}`,`  Database:      ${y.cyan(F[v].label)}`,`  Cache:         ${y.cyan(ee[w].label)}`,_t.length>0?`  Docker:        ${y.cyan(_t.map(he=>Te[he].label).join(", "))}`:`  Docker:        ${y.dim("none")}`].filter(Boolean).join(`
-`),k=[T!=="none"?`  Payment:       ${y.cyan(ct[T].label)} (${G})`:`  Payment:       ${y.dim("none")}`,`  Credits:       ${Z?y.cyan("Yes"):y.dim("No")}`,`  Email:         ${y.cyan(lt[L].label)}`,`  Multi-tenancy: ${W?y.cyan("Yes")+` (billing: ${pt[X].label})`:y.dim("No")}`,`  Blog:          ${ne?y.cyan("Yes"):y.dim("No")}`,`  Docs app:      ${b?y.cyan("Yes"):y.dim("No")}`,`  Desktop app:   ${R?y.cyan("Yes"):y.dim("No")}`,...R?[`  Releases:      ${y.cyan(K?"Automatic on CI":"Manual only")}`]:[],`  Rev. sharing:  ${A?y.cyan("Yes"):y.dim("No")}`,it.length>0?`  Social login:  ${y.cyan(it.map(he=>oe[he].label).join(", "))}`:`  Social login:  ${y.dim("none")}`,Ot.length>0?`  AI tools:      ${y.cyan(Ot.map(he=>We[he].label).join(", "))}`:`  AI tools:      ${y.dim("none")}`].join(`
-`),M=[y.bold("Project"),l,"",y.bold("Infrastructure"),d,"",y.bold("Features"),k];if(st.length>0){let he=st.map(sr=>{let oo=Ye[sr.key]?y.green("provided"):y.dim("skipped");return`  ${sr.key}: ${oo}`}).join(`
-`);M.push("",y.bold("Credentials"),he)}h.note(M.join(`
-`),"Summary");let V=await h.confirm({message:"Proceed with these settings?"});(h.isCancel(V)||!V)&&(h.cancel("Setup cancelled."),process.exit(0))}return{projectName:n,appName:o,projectDir:i,frontend:s,architecture:u,deploymentTarget:a,databaseProvider:v,cacheProvider:w,paymentProvider:T,emailProvider:L,multiTenancy:W,billingScope:X,blog:ne,docs:b,desktop:R,desktopAutoRelease:K,desktopAi:R?e?.desktopAi??!1:!1,revenueSharing:A,credits:Z,dockerServices:_t,aiTools:Ot,socialProviders:it,defaultCurrency:G,...Object.keys(Ye).length>0?{credentials:Ye}:{},...e?.baseUrl!==void 0?{baseUrl:e.baseUrl}:{},...xt!==void 0?{demo:xt}:{}}}import{createReadStream as fo}from"fs";import{mkdir as go}from"fs/promises";import{Readable as ho}from"stream";import{pipeline as vr}from"stream/promises";import{extract as yo}from"tar";import{join as be}from"path";import{homedir as io}from"os";var Qe=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",z=".generatesaas",de=be(z,"manifest.json"),dr=be(z,"hashes.json"),ft=be(z,"template-hashes.json"),gt=be(z,"template"),ur=be(z,"staging"),mr=be(z,"staging.json"),le=be(io(),".generatesaas");var $=class extends Error{constructor(r,n,o){super(n);this.status=r;this.body=o}status;body;name="ApiError"};function pe(e){return{apiKey:e,baseUrl:Qe}}async function ue(e,t,r){let n=`${e.baseUrl}${t}`,o=await fetch(n,{...r,headers:{...r?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!o.ok){let i,s;try{s=await o.json(),i=s.error??`API ${o.status}: ${t}`}catch{i=`API ${o.status}: ${t}`}throw new $(o.status,i,s)}return o}import{existsSync as so,readFileSync as ao,writeFileSync as co,mkdirSync as lo}from"fs";import{dirname as po}from"path";import*as me from"@clack/prompts";function et(){if(!so(le))return null;try{let e=JSON.parse(ao(le,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&me.log.warning(`Found old GitHub token in ${le}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function ke(e){lo(po(le),{recursive:!0}),co(le,JSON.stringify({apiKey:e},null,"	")+`
-`,{mode:384})}async function Le(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let r=et();if(r)return r;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return tt()}async function tt(){let e=await me.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return me.isCancel(e)&&(me.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function fe(e){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{latest:"0.0.0-ci",versions:[{version:"0.0.0-ci",date:new Date().toISOString(),breaking:!1}],entitlements:null}:await(await ue(e,"/versions")).json()}async function Nt(e,t){try{return await(await ue(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(r){if(r instanceof $&&r.status===404)return null;throw r}}async function fr(e,t){return await(await ue(e,`/skill/${encodeURIComponent(t)}`)).json()}function ht(e){if(!(e instanceof $)||e.status!==403)return null;let t=e.body;return!t||t.code!=="update_window_expired"?null:{message:e.message,lastAllowedVersion:t.lastAllowedVersion??null}}function gr(e){return{frontend:e.frontend,architecture:e.architecture,deployTarget:e.deploymentTarget,database:e.databaseProvider,cache:e.cacheProvider,payment:e.paymentProvider,email:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,credits:e.credits,revenueSharing:e.revenueSharing,socialProviders:e.socialProviders,aiTools:e.aiTools,currency:e.defaultCurrency}}async function Lt(e,t){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{token:"offline-test-token",licenseId:"offline-test-license-id",installId:t.installId}:await(await ue(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function hr(e,t){return await(await ue(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function $t(e,t){let r=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)});if(!r.ok)throw new Error(`Verification service returned ${r.status}`);return await r.json()}async function yr(e,t,r){let n=await fetch(`${e}/license/inspect`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify(r)});if(!n.ok){let o=await n.json().catch(()=>null);throw new Error(o?.error??`Inspect endpoint returned ${n.status}`)}return await n.json()}var jt=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".wrangler",".devcontainer","playwright-report","test-results"]),Ut=new Set(["pnpm-lock.yaml"]);function $e(e){if(Mt(e))return!0;for(let t of e.split("/"))if(Ut.has(t))return!0;return!1}var uo=new Set(["data","mksaas","references","scripts",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","README.md","TODO.md","OVERVIEW.md"]),mo=["docs/superpowers","packages/cli","packages/cli-api","infra/docker-compose.yml",".claude/commands",".claude/skills/web-next-port",".claude/skills/web-next-port-workspace",".claude/settings.local.json",".claude/worktrees"];function Mt(e){let t=e.split("/");for(let r of t)if(jt.has(r))return!0;if(uo.has(t[0]))return!0;for(let r of mo)if(e===r||e.startsWith(r+"/"))return!0;return!1}async function yt(e,t,r){await go(r,{recursive:!0});let n=process.env.GENERATESAAS_TEMPLATE_TARBALL;if(n){await vr(fo(n),br(r));return}let o=await ue(e,`/template/${encodeURIComponent(t)}`);if(!o.body)throw new Error("Empty response body");let i=ho.fromWeb(o.body);await vr(i,br(r))}function br(e){return yo({cwd:e,strip:1,filter:t=>{let r=t.replace(/^[^/]+\//,"");return r?!Mt(r):!0},sync:!1})}import{readdir as vo,readFile as Vt,rm as Sr,writeFile as Ft}from"fs/promises";import{join as je}from"path";var bo=["apps/web-nuxt/public/images/blog","apps/web-next/public/images/blog","packages/content/en/blog","packages/content/ro/blog"];async function wr(e){await Promise.all(bo.map(t=>Sr(je(e,t),{recursive:!0,force:!0})))}var ko="packages/config/src/blog.ts";async function Er(e){let t=je(e,ko),r=await Vt(t,"utf-8"),n=kr(kr(r,"blogCategories",t),"blogAuthors",t);await Ft(t,n)}function kr(e,t,r){let n=new RegExp(`(export const ${t}\\b[^=]*=\\s*)\\[[\\s\\S]*?\\];`);if(!n.test(e))throw new Error(`emptyBlogConfig: could not find the \`export const ${t} = [...]\` declaration in ${r}. The boilerplate blog config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);return e.replace(n,"$1[];")}async function Ar(e){let t=je(e,"packages/i18n/translations"),r;try{r=await vo(t)}catch{return}for(let n of r){let o=je(t,n,"web.json"),i;try{i=await Vt(o,"utf-8")}catch{continue}let s=JSON.parse(i);!s.blog||s.blog.categories===void 0||(s.blog.categories={},await Ft(o,JSON.stringify(s,null,"	")+`
-`))}}async function Ir(e,t){t.includes("claude-code")||await Sr(je(e,".claude"),{recursive:!0,force:!0})}async function Pr(e,t){let r=je(e,".claude","settings.json"),n;try{n=await Vt(r,"utf8")}catch{return}let o=JSON.parse(n);delete o.alwaysThinkingEnabled,delete o.enableAllProjectMcpServers,o.env&&(delete o.env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS,Object.keys(o.env).length===0&&delete o.env),o.permissions?.allow&&(o.permissions.allow=o.permissions.allow.filter(i=>So(i,t))),await Ft(r,JSON.stringify(o,null,"	")+`
-`)}function So(e,t){return!(e.startsWith("mcp__")||t!=="nuxt"&&e.includes("nuxt"))}import{join as Tr}from"path";import{mkdir as wo,readdir as Eo,rm as Ao,rmdir as Io,writeFile as Po}from"fs/promises";import{dirname as vt,join as To,relative as Ro,sep as _o}from"path";function Se(e){return e.split(_o).join("/")}async function bt(e){await wo(e,{recursive:!0})}async function c(e,t){await bt(vt(e)),await Po(e,t,"utf-8")}async function Bt(e,t){await Ao(e,{force:!0});let r=vt(e);for(;r!==t&&r!==vt(r);){try{await Io(r)}catch{return}r=vt(r)}}async function we(e,t,r){let n=[],o=await Eo(e,{withFileTypes:!0});for(let i of o){let s=To(e,i.name),a=Se(Ro(t,s));r(a)||(i.isDirectory()?n.push(...await we(s,t,r)):i.isFile()&&n.push(s))}return n}var Oo={postgres:"Postgres",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"},xo={resend:"Resend",ses:"Amazon SES",smtp:"SMTP"},Do={redis:"Redis",upstash:"Upstash Redis"},Co={node:"Node.js / Docker",vercel:"Vercel"},No={stripe:"Stripe",polar:"Polar"};function Lo(e){let t=e.frontend==="nuxt",r=t?"Nuxt 4":"Next.js 16",n=t?"apps/web-nuxt":"apps/web-next",o=t?"`app/` pages + components + composables":"`app/` routes, `components/`, `lib/`",i=e.architecture==="fullstack",s=i?"(fullstack - Hono API mounted inside the app)":"(separate - standalone Hono backend)",a=i?`Mounted inside \`${n}\`. A standalone \`apps/backend\` is also kept (inert) so you can switch to separate later.`:"Runs from `apps/backend`; the frontend reaches it over HTTP.",p=Do[e.cacheProvider],f=Co[e.deploymentTarget],m=e.paymentProvider==="none"?"":`
-- **Payments:** ${No[e.paymentProvider]}`,u=e.desktop?", and the Electron desktop app under `docs/desktop/`":"",v=t?"`$t('key')` in templates (global helper); `useI18n()` from `vue-i18n` in `<script setup>` for `locale`/`setLocale`/`t()`.":"`useTranslations()` from `next-intl` in components; messages are loaded in `apps/web-next/i18n/request.ts`.",w=t?"**Navigation:** always use `localePath()` for paths (hardcoded paths break non-default locales); `await navigateTo()` in SSR.":"**Navigation:** `next/link` for links; `redirect()` from `next/navigation` for programmatic redirects in Server Components.";return`# AGENTS.md
+import{Command as Ts}from"commander";import*as Oo from"@clack/prompts";import{existsSync as Ha,readdirSync as za,rmSync as Ya}from"fs";import{join as qa,resolve as Ja}from"path";import{Option as Q}from"commander";import*as A from"@clack/prompts";import*as ft from"@clack/prompts";import Gt from"picocolors";function xn(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";ft.intro(Gt.bgYellow(Gt.black(t)))}function Cn(){ft.outro(Gt.yellow("Happy building!"))}import*as g from"@clack/prompts";import y from"picocolors";var et={nextjs:{label:"Next.js",hint:"React 19 + Next.js 16"},nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"}},tt={fullstack:{label:"Fullstack",hint:"Frontend hosts the API - works on serverless or long-running"},separate:{label:"Separate",hint:"Standalone Hono backend - long-running runtimes only (Docker, Render, Fly.io, Railway, Coolify, Dokploy)"}},gt={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},ht={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},yt={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},De={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},nt={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var Se={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var ne={node:{label:"Node.js / Docker",hint:"long-running runtime - Render, Fly.io, Railway, Coolify, Dokploy, VPS",edgeRuntime:!1},vercel:{label:"Vercel",hint:"serverless functions",edgeRuntime:!0}},G={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},re={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},rt=[{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."}],ot=[{architecture:"separate",target:"vercel",reason:"Standalone backends need a long-running runtime. Vercel's per-function TypeScript check conflicts with pnpm's isolated install. Use --architecture fullstack for serverless, or deploy the standalone backend to a long-running runtime (Render, Fly.io, Railway, Coolify, Dokploy, or your own VPS via Docker)."}],Dn=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];function vt(e){let t=G[e.databaseProvider].managed,n=re[e.cacheProvider].managed;return e.dockerServices.some(r=>!(r==="postgres"&&t||r==="redis"&&n))}var se={google:{label:"Google",envVars:[{name:"GOOGLE_CLIENT_ID",secret:!1},{name:"GOOGLE_CLIENT_SECRET",secret:!0}]},github:{label:"GitHub",envVars:[{name:"GITHUB_CLIENT_ID",secret:!1},{name:"GITHUB_CLIENT_SECRET",secret:!0}]},facebook:{label:"Facebook",envVars:[{name:"FACEBOOK_CLIENT_ID",secret:!1},{name:"FACEBOOK_CLIENT_SECRET",secret:!0}]},discord:{label:"Discord",envVars:[{name:"DISCORD_CLIENT_ID",secret:!1},{name:"DISCORD_CLIENT_SECRET",secret:!0}]},x:{label:"X",envVars:[{name:"TWITTER_CLIENT_ID",secret:!1},{name:"TWITTER_CLIENT_SECRET",secret:!0}]}};var Ee=["nextjs","nuxt"],Ne=["fullstack","separate"],Le=["stripe","polar","none"],$e=["smtp","ses","resend"],je=["postgres","redis","inngest","mailpit"],Ue=["claude-code","cursor","codex","gemini-cli","windsurf"],Me=["user","organization"],ce=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],le=["node","vercel"],pe=["postgres","neon","supabase"],de=["redis","upstash"],Ve=["google","github","facebook","discord","x"];function kt(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function wt(e){return/^[a-z][a-z0-9-]*$/.test(e)}function C(e){return e instanceof Error?e.message:String(e)}var Nn=["companion","mcpServer","rag"];function zt(e){if(!Nn.some(n=>e[n]===!0))return e;if(e.ai===!1)throw new Error("--companion / --mcp-server / --rag require AI features; remove --no-ai.");return e.ai===void 0&&(e.ai=!0),e}function Ln(e){return Nn.some(n=>e[n]===!0)&&(e.ai=!0),e}function $n(e){let t={};if(e.name!==void 0){if(!wt(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Ee.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Ee.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org!==!0)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.desktop!==void 0&&(t.desktop=e.desktop),e.desktopAuto!==void 0&&(t.desktopAutoRelease=e.desktopAuto),e.desktopAi!==void 0){if(e.desktopAi===!0&&e.desktop!==!0)throw new Error("--desktop-ai requires --desktop to be enabled.");t.desktopAi=e.desktopAi}if(e.ai!==void 0&&(t.ai=e.ai),e.rag!==void 0&&(t.rag=e.rag),e.companion!==void 0&&(t.companion=e.companion),e.mcpServer!==void 0&&(t.mcpServer=e.mcpServer),e.aiByok!==void 0&&(t.aiByok=e.aiByok),zt(t),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=Ht(e.docker,je,"docker service")),e.aiTools!==void 0&&(t.aiTools=Ht(e.aiTools,Ue,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=Ht(e.socialProviders,Ve,"social provider")),e.currency!==void 0){if(!ce.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${ce.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!le.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${le.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!pe.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${pe.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!de.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${de.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let n=e.baseUrl.trim();if(n==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let r;try{r=new URL(n)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${r.protocol}//${r.host}`}return t}var ue={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,desktop:!1,desktopAutoRelease:!1,desktopAi:!1,ai:!1,rag:!1,companion:!1,mcpServer:!1,aiByok:!0,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function jn(e){let t=e.projectName??ue.projectName,n=e.projectDir??`./${t}`,r=e.appName??kt(t),o=e.deploymentTarget??ue.deploymentTarget,i=ne[o]?.edgeRuntime??!1,a=e.databaseProvider??(i?"neon":ue.databaseProvider),s=e.cacheProvider??(i?"upstash":ue.cacheProvider),p=e.emailProvider??(i?"resend":ue.emailProvider),f=e.dockerServices??(i?ue.dockerServices.filter(d=>d!=="postgres"&&d!=="redis"):ue.dockerServices),m={...ue,...e,projectName:t,appName:r,projectDir:n,deploymentTarget:o,databaseProvider:a,cacheProvider:s,emailProvider:p,dockerServices:f};m.paymentProvider==="none"&&(m.credits=!1),m.multiTenancy||(m.billingScope="user"),m.ai||(m.aiByok=ue.aiByok);for(let d of rt){if(m.deploymentTarget!==d.target)continue;let v=m.databaseProvider===d.provider?"database":"cache";if(m.databaseProvider===d.provider||m.cacheProvider===d.provider)throw new Error(`Incompatible: --deploy ${d.target} + --${v} ${d.provider}. ${d.reason}`)}for(let d of ot)if(m.architecture===d.architecture&&m.deploymentTarget===d.target)throw new Error(`Incompatible: --architecture ${d.architecture} + --deploy ${d.target}. ${d.reason}`);return m}function Ht(e,t,n){if(e.trim()==="")return[];let r=e.split(",").map(i=>i.trim()).filter(Boolean),o=r.filter(i=>!t.includes(i));if(o.length>0)throw new Error(`Invalid ${n}(s): ${o.join(", ")}. Valid values: ${t.join(", ")}`);return r}function E(e){g.isCancel(e)&&(g.cancel("Setup cancelled."),process.exit(0))}function Yt(e){let t=[];e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0}));for(let n of e.socialProviders){let r=se[n];for(let o of r.envVars)t.push({key:o.name,message:`${o.name} (${r.label}, optional):`,secret:o.secret})}return e.demo&&t.push({key:"TURNSTILE_SECRET_KEY",message:"Cloudflare Turnstile secret key (optional):",secret:!0}),t}async function Un(e,t){let n=!1;e&&zt(e),g.log.info(y.bold("Project"));let r=e?.projectName??await(async()=>{n=!0;let c=await g.text({message:"Project name:",placeholder:"my-saas",validate:u=>{if(!u?.trim())return"Project name is required.";if(!wt(u))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return E(c),c})(),o=e?.appName??await(async()=>{n=!0;let c=await g.text({message:"App name:",initialValue:kt(r),validate:u=>{if(!u?.trim())return"App name is required."}});return E(c),c})(),i=e?.projectDir??await(async()=>{n=!0;let c=await g.text({message:"Project location:",initialValue:`./${r}`});return E(c),c==="."?process.cwd():c})(),a=e?.frontend??await(async()=>{n=!0;let c=Object.keys(et),u=await g.select({message:"Frontend framework:",options:c.map(S=>({value:S,label:et[S].label,hint:et[S].hint}))});return E(u),u})();g.log.info(y.bold("Infrastructure"));let s=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){n=!0;let c=await g.select({message:"Deployment target:",options:le.map(u=>({value:u,label:ne[u].label,hint:ne[u].hint}))});E(c),s=c}let p=e?.architecture?ot.find(c=>c.architecture===e.architecture&&c.target===s):void 0;if(p)throw new Error(`Incompatible: --architecture ${p.architecture} + --deploy ${p.target}. ${p.reason}`);let f=new Set(ot.filter(c=>c.target===s).map(c=>c.architecture)),m=Ne.filter(c=>!f.has(c)),d=e?.architecture??await(async()=>{if(m.length===1){let u=m[0];return g.log.info(`Auto-selected ${tt[u].label} architecture (only compatible option for ${ne[s].label}).`),u}n=!0;let c=await g.select({message:"Architecture:",options:m.map(u=>({value:u,label:tt[u].label,hint:tt[u].hint}))});return E(c),c})(),v=e?.databaseProvider??await(async()=>{n=!0;let c=pe.filter(S=>!rt.some(F=>F.target===s&&F.provider===S));if(c.length===1){let S=c[0];return g.log.info(`Auto-selected ${G[S].label} (only compatible option for ${ne[s].label}).`),S}let u=await g.select({message:"Database provider:",options:c.map(S=>({value:S,label:G[S].label,hint:G[S].hint}))});return E(u),u})(),b=e?.cacheProvider??await(async()=>{n=!0;let c=de.filter(S=>!rt.some(F=>F.target===s&&F.provider===S));if(c.length===1){let S=c[0];return g.log.info(`Auto-selected ${re[S].label} (only compatible option for ${ne[s].label}).`),S}let u=await g.select({message:"Cache provider:",options:c.map(S=>({value:S,label:re[S].label,hint:re[S].hint}))});return E(u),u})();if(ne[s]?.edgeRuntime){let c=Dn.map(u=>`  - ${u}`).join(`
+`);g.note(c,"Unavailable on edge runtime")}g.log.info(y.bold("Features"));let I=e?.paymentProvider??await(async()=>{n=!0;let c=await g.select({message:"Payment provider:",options:Le.map(u=>({value:u,label:gt[u].label,hint:gt[u].hint}))});return E(c),c})(),z=e?.defaultCurrency??await(async()=>{if(I==="none")return"USD";n=!0;let c=await g.select({message:"Default currency:",options:ce.map(u=>({value:u,label:u,hint:Se[u].name}))});return E(c),c})(),L=e?.emailProvider??await(async()=>{n=!0;let c=await g.select({message:"Email provider:",options:$e.map(u=>({value:u,label:ht[u].label,hint:ht[u].hint}))});return E(c),c})(),K=e?.multiTenancy??await(async()=>{n=!0;let c=await g.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return E(c),c})(),ge=K?e?.billingScope??"user":"user";if(K&&e?.billingScope===void 0){n=!0;let c=await g.select({message:"Billing scope:",options:Me.map(u=>({value:u,label:yt[u].label,hint:yt[u].hint}))});E(c),ge=c}let Y=e?.blog??await(async()=>{n=!0;let c=await g.confirm({message:"Enable blog?",initialValue:!0});return E(c),c})(),k=e?.docs??await(async()=>{n=!0;let c=await g.confirm({message:"Include docs app? (self-hosted Fumadocs documentation site)",initialValue:!1});return E(c),c})(),R=t?.desktopAllowed!==!1,P=e?.desktop??(R?await(async()=>{n=!0;let c=await g.confirm({message:"Include the Electron desktop app? (apps/desktop - cross-platform, device-auth)",initialValue:!1});return E(c),c})():(g.log.info(y.dim("Desktop app: available on the Pro plan and up - skipped.")),!1)),ae=P?e?.desktopAutoRelease??await(async()=>{n=!0;let c=await g.select({message:"Desktop release trigger:",options:[{value:!1,label:"Manual only",hint:"run from the Actions tab (saves CI minutes)"},{value:!0,label:"Automatic",hint:"release on every CI success on main"}],initialValue:!1});return E(c),c})():!1,$=e?.ai??await(async()=>{n=!0;let c=await g.confirm({message:"Add AI features? (chat, models, schedules, integrations - and unlocks the companion + MCP server)",initialValue:!1});return E(c),c})(),T=$?e?.rag??await(async()=>{n=!0;let c=await g.confirm({message:"Add server-side RAG knowledge (pgvector embeddings + semantic search)?",initialValue:!1});return E(c),c})():!1,we=$?e?.companion??await(async()=>{n=!0;let c=await g.confirm({message:"Add the companion daemon? A small program your users install on their own machine or VPS to run their Claude Code / Codex / OpenCode subscription for this app 24/7 - the AI runs on their hardware, not yours.",initialValue:!1});return E(c),c})():!1,Pn=$?e?.mcpServer??await(async()=>{n=!0;let c=await g.confirm({message:"Add the outward MCP server? Lets external agents (Claude Code, Codex, Hermes, OpenClaw) control the app on a user's behalf over an authenticated MCP endpoint.",initialValue:!1});return E(c),c})():!1,Tn=$?e?.aiByok??await(async()=>{n=!0;let c=await g.confirm({message:"AI BYOK mode? (end-users bring their own provider key; no = operator-keyed, credit-metered)",initialValue:!0});return E(c),c})():!0,Rn=e?.revenueSharing??await(async()=>{n=!0;let c=await g.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return E(c),c})(),_n=I==="none"?!1:e?.credits??await(async()=>{n=!0;let c=await g.confirm({message:"Enable credits? (metered usage on top of subscription plans)",initialValue:!0});return E(c),c})(),ut=e?.socialProviders??await(async()=>{n=!0;let c=Ve.map(S=>({value:S,label:se[S].label,hint:`requires ${se[S].envVars.map(F=>F.name).join(" / ")}`})),u=await g.multiselect({message:"Which social login providers should the sign-in screen show?",options:c,initialValues:[],required:!1});return E(u),u})();g.log.info(y.bold("Tooling"));let Ft=e?.dockerServices??await(async()=>{n=!0;let c=[...je].filter(B=>B!=="mailpit");L==="smtp"&&c.push("mailpit");let u=c.map(B=>({value:B,label:De[B].label,hint:De[B].hint})),S=u.map(B=>B.value).filter(B=>!(B==="postgres"&&(v==="neon"||v==="supabase")||B==="redis"&&b==="upstash")),F=await g.multiselect({message:"Which services should we set up in Docker for you?",options:u,initialValues:S,required:!1});return E(F),F})(),Bt=e?.aiTools??await(async()=>{n=!0;let c=Ue.map(S=>({value:S,label:nt[S].label})),u=await g.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return E(u),u})(),Kt=e?.demo,mt=Yt({databaseProvider:v,cacheProvider:b,paymentProvider:I,emailProvider:L,socialProviders:ut,demo:Kt}),Qe={};if(mt.length>0&&n){g.log.info(y.bold("Credentials")+y.dim("  all optional - press Enter to skip, fill in .env later"));for(let c of mt)if(n=!0,c.secret){let u=await g.password({message:c.message,mask:"*"});E(u),typeof u=="string"&&u.trim()&&(Qe[c.key]=u.trim())}else{let u=await g.text({message:c.message,placeholder:c.placeholder});E(u),typeof u=="string"&&u.trim()&&(Qe[c.key]=u.trim())}}if(n){let c=[`  Name:          ${y.cyan(r)}`,`  App name:      ${y.cyan(o)}`,`  Location:      ${y.cyan(i)}`,`  Frontend:      ${y.cyan(et[a].label)}`,`  Architecture:  ${y.cyan(tt[d].label)}`].join(`
+`),u=[`  Deploy target: ${y.cyan(ne[s]?.label??"Node.js / Docker")}`,`  Database:      ${y.cyan(G[v].label)}`,`  Cache:         ${y.cyan(re[b].label)}`,Ft.length>0?`  Docker:        ${y.cyan(Ft.map(be=>De[be].label).join(", "))}`:`  Docker:        ${y.dim("none")}`].filter(Boolean).join(`
+`),S=[I!=="none"?`  Payment:       ${y.cyan(gt[I].label)} (${z})`:`  Payment:       ${y.dim("none")}`,`  Credits:       ${_n?y.cyan("Yes"):y.dim("No")}`,`  AI features:   ${$?y.cyan("Yes"):y.dim("No")}`,...$?[`  AI mode:       ${y.cyan(Tn?"BYOK":"Operator-keyed (credits)")}`,`  RAG knowledge: ${T?y.cyan("Yes"):y.dim("No")}`,`  Companion:     ${we?y.cyan("Yes"):y.dim("No")}`,`  MCP server:    ${Pn?y.cyan("Yes"):y.dim("No")}`]:[],`  Email:         ${y.cyan(ht[L].label)}`,`  Multi-tenancy: ${K?y.cyan("Yes")+` (billing: ${yt[ge].label})`:y.dim("No")}`,`  Blog:          ${Y?y.cyan("Yes"):y.dim("No")}`,`  Docs app:      ${k?y.cyan("Yes"):y.dim("No")}`,`  Desktop app:   ${P?y.cyan("Yes"):y.dim("No")}`,...P?[`  Releases:      ${y.cyan(ae?"Automatic on CI":"Manual only")}`]:[],`  Rev. sharing:  ${Rn?y.cyan("Yes"):y.dim("No")}`,ut.length>0?`  Social login:  ${y.cyan(ut.map(be=>se[be].label).join(", "))}`:`  Social login:  ${y.dim("none")}`,Bt.length>0?`  AI tools:      ${y.cyan(Bt.map(be=>nt[be].label).join(", "))}`:`  AI tools:      ${y.dim("none")}`].join(`
+`),F=[y.bold("Project"),c,"",y.bold("Infrastructure"),u,"",y.bold("Features"),S];if(mt.length>0){let be=mt.map(On=>{let xo=Qe[On.key]?y.green("provided"):y.dim("skipped");return`  ${On.key}: ${xo}`}).join(`
+`);F.push("",y.bold("Credentials"),be)}g.note(F.join(`
+`),"Summary");let B=await g.confirm({message:"Proceed with these settings?"});(g.isCancel(B)||!B)&&(g.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:o,projectDir:i,frontend:a,architecture:d,deploymentTarget:s,databaseProvider:v,cacheProvider:b,paymentProvider:I,emailProvider:L,multiTenancy:K,billingScope:ge,blog:Y,docs:k,desktop:P,desktopAutoRelease:ae,desktopAi:P?e?.desktopAi??!1:!1,ai:$,rag:T,companion:we,mcpServer:Pn,aiByok:Tn,revenueSharing:Rn,credits:_n,dockerServices:Ft,aiTools:Bt,socialProviders:ut,defaultCurrency:z,...Object.keys(Qe).length>0?{credentials:Qe}:{},...e?.baseUrl!==void 0?{baseUrl:e.baseUrl}:{},...Kt!==void 0?{demo:Kt}:{}}}import{createReadStream as Fo}from"fs";import{mkdir as Bo}from"fs/promises";import{Readable as Ko}from"stream";import{pipeline as zn}from"stream/promises";import{extract as Go}from"tar";import{join as Ae}from"path";import{homedir as Co}from"os";var it=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",q=".generatesaas",he=Ae(q,"manifest.json"),Mn=Ae(q,"hashes.json"),bt=Ae(q,"template-hashes.json"),St=Ae(q,"template"),Vn=Ae(q,"staging"),Fn=Ae(q,"staging.json"),me=Ae(Co(),".generatesaas");var U=class extends Error{constructor(n,r,o){super(r);this.status=n;this.body=o}status;body;name="ApiError"};function fe(e){return{apiKey:e,baseUrl:it}}async function ye(e,t,n){let r=`${e.baseUrl}${t}`,o=await fetch(r,{...n,headers:{...n?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!o.ok){let i,a;try{a=await o.json(),i=a.error??`API ${o.status}: ${t}`}catch{i=`API ${o.status}: ${t}`}throw new U(o.status,i,a)}return o}import{existsSync as Do,readFileSync as No,writeFileSync as Lo,mkdirSync as $o}from"fs";import{dirname as jo}from"path";import*as ve from"@clack/prompts";function at(){if(!Do(me))return null;try{let e=JSON.parse(No(me,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&ve.log.warning(`Found old GitHub token in ${me}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function Ie(e){$o(jo(me),{recursive:!0}),Lo(me,JSON.stringify({apiKey:e},null,"	")+`
+`,{mode:384})}async function Fe(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let n=at();if(n)return n;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return st()}async function st(){let e=await ve.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return ve.isCancel(e)&&(ve.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function ke(e){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{latest:"0.0.0-ci",versions:[{version:"0.0.0-ci",date:new Date().toISOString(),breaking:!1}],entitlements:null}:await(await ye(e,"/versions")).json()}async function qt(e,t){try{return await(await ye(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(n){if(n instanceof U&&n.status===404)return null;throw n}}async function Bn(e,t){return await(await ye(e,`/skill/${encodeURIComponent(t)}`)).json()}function Et(e){if(!(e instanceof U)||e.status!==403)return null;let t=e.body;return!t||t.code!=="update_window_expired"?null:{message:e.message,lastAllowedVersion:t.lastAllowedVersion??null}}function Kn(e){return{frontend:e.frontend,architecture:e.architecture,deployTarget:e.deploymentTarget,database:e.databaseProvider,cache:e.cacheProvider,payment:e.paymentProvider,email:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,credits:e.credits,revenueSharing:e.revenueSharing,socialProviders:e.socialProviders,aiTools:e.aiTools,currency:e.defaultCurrency}}async function Jt(e,t){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{token:"offline-test-token",licenseId:"offline-test-license-id",installId:t.installId}:await(await ye(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Gn(e,t){return await(await ye(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Wt(e,t){let n=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)});if(!n.ok)throw new Error(`Verification service returned ${n.status}`);return await n.json()}async function Hn(e,t,n){let r=await fetch(`${e}/license/inspect`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify(n)});if(!r.ok){let o=await r.json().catch(()=>null);throw new Error(o?.error??`Inspect endpoint returned ${r.status}`)}return await r.json()}var Xt=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".wrangler",".devcontainer","playwright-report","test-results"]),Zt=new Set(["pnpm-lock.yaml"]);function Be(e){if(Qt(e))return!0;for(let t of e.split("/"))if(Zt.has(t))return!0;return!1}var Uo=new Set(["data","mksaas","references","scripts",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","README.md","TODO.md","OVERVIEW.md"]),Mo=["scripts/knowledge-corpus.ts","scripts/knowledge-corpus.test.ts","scripts/knowledge-lint.ts","scripts/knowledge-build.ts","scripts/dev-ai-setup.ts","scripts/docs-lint.ts"],Vo=["docs/superpowers","packages/cli","packages/cli-api","infra/docker-compose.yml",".claude/commands",".claude/skills/web-next-port",".claude/skills/web-next-port-workspace",".claude/settings.local.json",".claude/worktrees"];function Qt(e){let t=e.split("/");for(let n of t)if(Xt.has(n))return!0;if(Mo.includes(e))return!1;if(Uo.has(t[0]))return!0;for(let n of Vo)if(e===n||e.startsWith(n+"/"))return!0;return!1}async function At(e,t,n){await Bo(n,{recursive:!0});let r=process.env.GENERATESAAS_TEMPLATE_TARBALL;if(r){await zn(Fo(r),Yn(n));return}let o=await ye(e,`/template/${encodeURIComponent(t)}`);if(!o.body)throw new Error("Empty response body");let i=Ko.fromWeb(o.body);await zn(i,Yn(n))}function Yn(e){return Go({cwd:e,strip:1,filter:t=>{let n=t.replace(/^[^/]+\//,"");return n?!Qt(n):!0},sync:!1})}import{readdir as Ho,readFile as en,rm as Jn,writeFile as tn}from"fs/promises";import{join as Ke}from"path";var zo=["apps/web-nuxt/public/images/blog","apps/web-next/public/images/blog","packages/content/en/blog","packages/content/ro/blog"];async function Wn(e){await Promise.all(zo.map(t=>Jn(Ke(e,t),{recursive:!0,force:!0})))}var Yo="packages/config/src/blog.ts";async function Xn(e){let t=Ke(e,Yo),n=await en(t,"utf-8"),r=qn(qn(n,"blogCategories",t),"blogAuthors",t);await tn(t,r)}function qn(e,t,n){let r=new RegExp(`(export const ${t}\\b[^=]*=\\s*)\\[[\\s\\S]*?\\];`);if(!r.test(e))throw new Error(`emptyBlogConfig: could not find the \`export const ${t} = [...]\` declaration in ${n}. The boilerplate blog config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);return e.replace(r,"$1[];")}async function Zn(e){let t=Ke(e,"packages/i18n/translations"),n;try{n=await Ho(t)}catch{return}for(let r of n){let o=Ke(t,r,"web.json"),i;try{i=await en(o,"utf-8")}catch{continue}let a=JSON.parse(i);!a.blog||a.blog.categories===void 0||(a.blog.categories={},await tn(o,JSON.stringify(a,null,"	")+`
+`))}}async function Qn(e,t){t.includes("claude-code")||await Jn(Ke(e,".claude"),{recursive:!0,force:!0})}async function er(e,t){let n=Ke(e,".claude","settings.json"),r;try{r=await en(n,"utf8")}catch{return}let o=JSON.parse(r);delete o.alwaysThinkingEnabled,delete o.enableAllProjectMcpServers,o.env&&(delete o.env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS,Object.keys(o.env).length===0&&delete o.env),o.permissions?.allow&&(o.permissions.allow=o.permissions.allow.filter(i=>qo(i,t))),await tn(n,JSON.stringify(o,null,"	")+`
+`)}function qo(e,t){return!(e.startsWith("mcp__")||t!=="nuxt"&&e.includes("nuxt"))}import{join as tr}from"path";import{mkdir as Jo,readdir as Wo,rm as Xo,rmdir as Zo,writeFile as Qo}from"fs/promises";import{dirname as It,join as ei,relative as ti,sep as ni}from"path";function Pe(e){return e.split(ni).join("/")}async function Pt(e){await Jo(e,{recursive:!0})}async function l(e,t){await Pt(It(e)),await Qo(e,t,"utf-8")}async function nn(e,t){await Xo(e,{force:!0});let n=It(e);for(;n!==t&&n!==It(n);){try{await Zo(n)}catch{return}n=It(n)}}async function Te(e,t,n){let r=[],o=await Wo(e,{withFileTypes:!0});for(let i of o){let a=ei(e,i.name),s=Pe(ti(t,a));n(s)||(i.isDirectory()?r.push(...await Te(a,t,n)):i.isFile()&&r.push(a))}return r}var ri={postgres:"Postgres",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"},oi={resend:"Resend",ses:"Amazon SES",smtp:"SMTP"},ii={redis:"Redis",upstash:"Upstash Redis"},ai={node:"Node.js / Docker",vercel:"Vercel"},si={stripe:"Stripe",polar:"Polar"};function ci(e){let t=e.frontend==="nuxt",n=t?"Nuxt 4":"Next.js 16",r=t?"apps/web-nuxt":"apps/web-next",o=t?"`app/` pages + components + composables":"`app/` routes, `components/`, `lib/`",i=e.architecture==="fullstack",a=i?"(fullstack - Hono API mounted inside the app)":"(separate - standalone Hono backend)",s=i?`Mounted inside \`${r}\`. A standalone \`apps/backend\` is also kept (inert) so you can switch to separate later.`:"Runs from `apps/backend`; the frontend reaches it over HTTP.",p=ii[e.cacheProvider],f=ai[e.deploymentTarget],m=e.paymentProvider==="none"?"":`
+- **Payments:** ${si[e.paymentProvider]}`,d=e.desktop?", and the Electron desktop app under `docs/desktop/`":"",v=t?"`$t('key')` in templates (global helper); `useI18n()` from `vue-i18n` in `<script setup>` for `locale`/`setLocale`/`t()`.":"`useTranslations()` from `next-intl` in components; messages are loaded in `apps/web-next/i18n/request.ts`.",b=t?"**Navigation:** always use `localePath()` for paths (hardcoded paths break non-default locales); `await navigateTo()` in SSR.":"**Navigation:** `next/link` for links; `redirect()` from `next/navigation` for programmatic redirects in Server Components.";return`# AGENTS.md
 
 Guidelines for AI coding agents (Claude Code, Codex, Cursor, \u2026) in this project.
 Keep this file tight: add a rule only when it prevents a recurring mistake - too
@@ -23,7 +23,7 @@ and go find it:
 
 1. \`docs/${t?"nuxt":"next"}/index.mdx\` - the catalog of every shipped feature and its config flag.
 2. \`packages/config/src/index.ts\` - the flag that turns the feature on/off (check it before rendering).
-3. Search \`packages/\` and \`${n}/\` for the name before creating anything.
+3. Search \`packages/\` and \`${r}/\` for the name before creating anything.
 
 Already built - extend these, never re-implement: auth (email / OAuth / 2FA / passkeys),
 billing & subscriptions, credits, organizations & teams, notifications, email, SMS,
@@ -35,12 +35,12 @@ flag, route, or translation is the most common and most costly mistake in this r
 
 ## Stack
 
-- **Frontend:** ${r} ${s}
-- **API:** Hono, RPC-typed. ${a}
-- **Database:** Drizzle ORM + ${Oo[e.databaseProvider]}
+- **Frontend:** ${n} ${a}
+- **API:** Hono, RPC-typed. ${s}
+- **Database:** Drizzle ORM + ${ri[e.databaseProvider]}
 - **Cache + jobs:** ${p} + Inngest
 - **Auth:** Better Auth${m}
-- **Email:** ${xo[e.emailProvider]}
+- **Email:** ${oi[e.emailProvider]}
 - **Deploy:** ${f}
 
 ## Where things live (extend these - don't reinvent)
@@ -51,8 +51,12 @@ flag, route, or translation is the most common and most costly mistake in this r
 - \`packages/auth/src/config.ts\` - Better Auth config.
 - \`packages/runtime/src/env.ts\` - the validated (Zod) env schema. New env var \u2192 add it here **and** to \`.env.example\` (the committed reference); set the local value in \`.env\`.
 - \`packages/{payments,mail,sms,storage,notifications}\` - config-gated integrations. Every provider's files stay even when its feature is off, so flipping a flag is enough to enable it.
-- \`${n}\` - the ${r} app (${o}).
-- \`docs/${t?"nuxt":"next"}/\` - feature & architecture documentation for this stack (Markdown). Consult it before searching from scratch; it cites real config keys, package names, and file paths you can act on. The GenerateSaaS CLI lives under \`docs/cli/\`${u}.
+- \`${r}\` - the ${n} app (${o}).
+- \`docs/${t?"nuxt":"next"}/\` - feature & architecture documentation for this stack (Markdown). Consult it before searching from scratch; it cites real config keys, package names, and file paths you can act on. The GenerateSaaS CLI lives under \`docs/cli/\`${d}.
+
+## Knowledge
+
+\`knowledge/\` is the product knowledge that grounds the AI: read-only markdown entries, confidential, never user-facing - injected into the model's context so it answers from your facts. When you add or maintain an entry, FOLLOW THE RULES in \`knowledge/AGENTS.md\` (one concept per entry, frontmatter, \`[[wikilinks]]\`) and run \`pnpm knowledge:lint\` to validate. \`pnpm knowledge:build\` seeds the web search index (gated by \`config.rag.enabled\`); the desktop app self-indexes its bundled copy. See \`docs/${t?"nuxt":"next"}/knowledge.mdx\`.
 
 ## Code style
 
@@ -70,7 +74,7 @@ flag, route, or translation is the most common and most costly mistake in this r
 - **Hono routes:** keep the method chain (\`.get().post()\`) - RPC type inference depends on it. Validate with \`sValidator\` from \`@hono/standard-validator\`.
 - **Feature flags:** respect \`config.*\` - hide/skip a feature when its flag is off (the files stay so you can flip it later).
 - **i18n:** strings live in \`packages/i18n/translations/{locale}/{scope}.json\`; edit \`en/\` only, keep keys generic. ${v} A pre-commit hook runs \`pnpm translate\` (needs \`OPENROUTER_API_KEY\`) to sync other locales from \`en\`; without the key it skips.
-- ${w}
+- ${b}
 - **Routes:** use \`config.routes.*\`, never hardcoded path strings.
 - **Secrets:** never send them to an external service; generate tokens/QR codes client-side.
 
@@ -81,25 +85,25 @@ In \`@repo/*\` backend packages prefer web-standard APIs: \`crypto.randomUUID()\
 ## This project
 
 Scaffolded from the GenerateSaaS boilerplate. To pull upstream boilerplate updates, ask your agent to **"update my GenerateSaaS project"**. To remove the license heartbeat + manifest: \`pnpm dlx generatesaas eject\`.
-`}async function Rr(e){await c(Tr(e.projectDir,"AGENTS.md"),Lo(e)),await c(Tr(e.projectDir,"CLAUDE.md"),`@AGENTS.md
-`)}import{join as $o}from"path";var jo={postgres:"Postgres (self-hosted)",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"};function Uo(e){let t=e.appName.trim()||e.projectName,r=e.frontend==="nuxt",n=r?"Nuxt 4":"Next.js 16",o=r?"apps/web-nuxt":"apps/web-next",i=jo[e.databaseProvider],s=dt(e),a=e.architecture==="fullstack"?`${n} app at \`${o}/\` with the Hono API mounted inside it. A standalone \`apps/backend/\` is also included (inert in this fullstack setup) so you can split the API into a separate service later without re-scaffolding.`:`${n} app at \`${o}/\` and a separate Hono backend at \`apps/backend/\`.`,p=e.architecture==="fullstack"?`- App + API: http://localhost:3000
+`}async function nr(e){await l(tr(e.projectDir,"AGENTS.md"),ci(e)),await l(tr(e.projectDir,"CLAUDE.md"),`@AGENTS.md
+`)}import{join as li}from"path";var pi={postgres:"Postgres (self-hosted)",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"};function di(e){let t=e.appName.trim()||e.projectName,n=e.frontend==="nuxt",r=n?"Nuxt 4":"Next.js 16",o=n?"apps/web-nuxt":"apps/web-next",i=pi[e.databaseProvider],a=vt(e),s=e.architecture==="fullstack"?`${r} app at \`${o}/\` with the Hono API mounted inside it. A standalone \`apps/backend/\` is also included (inert in this fullstack setup) so you can split the API into a separate service later without re-scaffolding.`:`${r} app at \`${o}/\` and a separate Hono backend at \`apps/backend/\`.`,p=e.architecture==="fullstack"?`- App + API: http://localhost:3000
 - Inngest dev server: http://127.0.0.1:8288`:`- App: http://localhost:3000
 - API: http://localhost:3010
-- Inngest dev server: http://127.0.0.1:8288`,f=s?`pnpm infra             # optional: starts local Docker services (Postgres / Redis / Inngest / Mailpit)
+- Inngest dev server: http://127.0.0.1:8288`,f=a?`pnpm infra             # optional: starts local Docker services (Postgres / Redis / Inngest / Mailpit)
 `:"",m=e.deploymentTarget==="vercel"?"### Deployment\n\nDeploy to Vercel: `vercel deploy` (or connect the repo in the Vercel dashboard). Required environment variables are listed in `.env`.":`### Deployment
 
-This project ships with Dockerfiles for each app. Build images with \`docker build\` and deploy to your runtime of choice (Render / Fly.io / Railway / Coolify / Dokploy / your own VPS).${s?"\n\nThe `infra/` directory ships a Docker Compose file for the local-only services (Postgres / Redis / Inngest / Mailpit, filtered by your provider choices).":""}`,u=e.aiTools.length>0?"To pull the latest boilerplate changes into this project, open it in your AI coding agent and ask: `update my GenerateSaaS project`.":"To pull the latest boilerplate changes into this project, install an AI coding agent (Claude Code / Cursor / Codex / Gemini CLI / Windsurf) and ask: `update my GenerateSaaS project`. The skill bundle that drives the update lives under each tool's skill root.";return`# ${t}
+This project ships with Dockerfiles for each app. Build images with \`docker build\` and deploy to your runtime of choice (Render / Fly.io / Railway / Coolify / Dokploy / your own VPS).${a?"\n\nThe `infra/` directory ships a Docker Compose file for the local-only services (Postgres / Redis / Inngest / Mailpit, filtered by your provider choices).":""}`,d=e.aiTools.length>0?"To pull the latest boilerplate changes into this project, open it in your AI coding agent and ask: `update my GenerateSaaS project`.":"To pull the latest boilerplate changes into this project, install an AI coding agent (Claude Code / Cursor / Codex / Gemini CLI / Windsurf) and ask: `update my GenerateSaaS project`. The skill bundle that drives the update lives under each tool's skill root.";return`# ${t}
 
-${a}
+${s}
 
 ## Stack
 
-- **Frontend:** ${n}
+- **Frontend:** ${r}
 - **Backend:** Hono (TypeScript, RPC-typed)
 - **Auth:** Better Auth
 - **ORM / DB:** Drizzle + ${i}
 - **Background jobs:** Inngest
-- **i18n:** ${r?"@nuxtjs/i18n":"next-intl"}
+- **i18n:** ${n?"@nuxtjs/i18n":"next-intl"}
 
 ## Development
 
@@ -108,7 +112,8 @@ pnpm install
 # A ready-to-run \`.env\` was generated for you - open it and fill in the
 # values marked \`# TODO\` (provider API keys). \`.env.example\` is the committed
 # reference. All apps load the single root \`.env\`.
-${f}pnpm dev
+${f}pnpm db:setup          # first run: enable pgvector + create the schema (idempotent)
+pnpm dev
 \`\`\`
 
 ${p}
@@ -124,7 +129,8 @@ App-level configuration lives in \`packages/config/src/index.ts\`. Translation s
 ## Database
 
 \`\`\`bash
-pnpm -F @repo/database push       # push schema changes
+pnpm db:setup                     # enable pgvector + push schema + knowledge indexes (idempotent)
+pnpm -F @repo/database push       # push schema changes only (once pgvector exists)
 pnpm -F @repo/database migrate    # run migrations
 pnpm -F @repo/database studio     # open Drizzle Studio
 pnpm auth:generate                # regenerate Better Auth schema after config changes
@@ -142,12 +148,12 @@ pnpm dlx generatesaas eject
 
 ## Updates
 
-${u}
-`}async function _r(e){await c($o(e.projectDir,"README.md"),Uo(e))}import{join as kt}from"path";function Mo(e){let t=e.split(".");return t.length>=3?t.slice(1).join("."):e}function Vo(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")||"app"}function Fo(e,t){let r=Vo(e);return{appId:`${t.split(".").reverse().join(".")}.${r.replace(/-/g,"")}`,productName:e,protocol:r}}async function Or(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),r=e.paymentProvider!=="none",n=e.baseUrl??"http://localhost:3000",o=e.baseUrl?new URL(e.baseUrl).hostname:"example.com",i=Mo(o),s=e.demo?"false":"true",a=e.demo?`
+${d}
+`}async function rr(e){await l(li(e.projectDir,"README.md"),di(e))}import{join as Tt}from"path";function ui(e){let t=e.split(".");return t.length>=3?t.slice(1).join("."):e}function mi(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")||"app"}function fi(e,t){let n=mi(e);return{appId:`${t.split(".").reverse().join(".")}.${n.replace(/-/g,"")}`,productName:e,protocol:n}}async function or(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),n=e.paymentProvider!=="none",r=e.baseUrl??"http://localhost:3000",o=e.baseUrl?new URL(e.baseUrl).hostname:"example.com",i=ui(o),a=e.demo?"false":"true",s=e.demo?`
 	support: {
 		enableInDev: true,
 		crisp: { websiteId: "7e221cec-ed61-46b7-b1b4-8cbc16557cca" }
-	},`:"",p=e.frontend==="nextjs"&&e.architecture==="fullstack"?"false":"true",f=Fo(t,i),m=`import type { AppConfig } from "@repo/config/types";
+	},`:"",p=e.frontend==="nextjs"&&e.architecture==="fullstack"?"false":"true",f=fi(t,i),m=`{ enabled: ${e.rag} }`,d=e.companion?'{ enabled: true, clientId: "companion" }':'{ enabled: false, clientId: "companion" }',v=`{ enabled: ${e.mcpServer} }`,b=`import type { AppConfig } from "@repo/config/types";
 import { desktopConfig } from "./desktop.mjs";
 import { tenancyConfig } from "./tenancy-flags.mjs";
 
@@ -157,8 +163,8 @@ export const config: AppConfig = {
 	siteName: "${t}",
 	fullSiteName: "${t}",
 	domain: "${o}",
-	baseUrl: process.env.BASE_URL ?? "${n}",
-	indexable: ${s},
+	baseUrl: process.env.BASE_URL ?? "${r}",
+	indexable: ${a},
 	logo: {
 		main: "/images/logo.svg",
 		square: "/images/logo-square.svg"
@@ -204,7 +210,7 @@ export const config: AppConfig = {
 		maxFileSizeMB: 5,
 		dailyUploadLimit: 20
 	},
-	payment: ${r?`{
+	payment: ${n?`{
 		enabled: true,
 		provider: "${e.paymentProvider}",
 		bannedCountries: ["BY", "CU", "IR", "KP", "RU", "SY"]
@@ -234,7 +240,7 @@ export const config: AppConfig = {
 		enabled: true,
 		provider: "turnstile",
 		siteKey: "0x4AAAAAACJo9y9FxH8lqkGu"
-	}`:"{ enabled: false }"},${a}
+	}`:"{ enabled: false }"},${s}
 	currency: ${e.demo?`{
 		// Demo mirrors the boilerplate's showcase config so geo\u2192currency
 		// switching can be demonstrated. Real users get a single-currency
@@ -254,7 +260,7 @@ export const config: AppConfig = {
 	}`:`{
 		base: "${e.defaultCurrency}",
 		list: [
-			{ symbol: "${ye[e.defaultCurrency].symbol}", name: "${ye[e.defaultCurrency].name}", code: "${e.defaultCurrency}", place: "${ye[e.defaultCurrency].place}", space: ${ye[e.defaultCurrency].space} }
+			{ symbol: "${Se[e.defaultCurrency].symbol}", name: "${Se[e.defaultCurrency].name}", code: "${e.defaultCurrency}", place: "${Se[e.defaultCurrency].place}", space: ${Se[e.defaultCurrency].space} }
 		],
 		countryMap: {
 			default: "${e.defaultCurrency}"
@@ -277,8 +283,11 @@ export const config: AppConfig = {
 		contentDir: "content/docs"
 	},
 	ai: {
-		enabled: false,
-		defaultModel: "claude-opus-4-8",
+		enabled: ${e.ai},
+		// AI billing mode chosen at init (--ai-byok / --no-ai-byok). BYOK: end-users bring their
+		// own provider key, all catalog providers are usable, and chat is NOT credit-metered. The
+		// operator-keyed, credit-metered platform mode (false) uses the models/credits below.
+		byok: ${e.aiByok},
 		models: {
 			// EXAMPLE entry - set provider/modelId for your model and update the
 			// rates below to the provider's CURRENT pricing. These numbers are
@@ -290,9 +299,18 @@ export const config: AppConfig = {
 				outputPerMTok: 25
 			}
 		},
-		credits: { creditsPerUsd: 100, margin: 1, fallbackRatePerMTok: { input: 5, output: 25 } }
+		credits: { creditsPerUsd: 100, margin: 1, fallbackRatePerMTok: { input: 5, output: 25 } },
+		// Let end-users author their own AI schedules. Set to false to ship only the
+		// create-disabled view (existing schedules still list/run/edit/delete).
+		userSchedules: true
 	},
 	desktop: desktopConfig,
+	// Server-side RAG (pgvector knowledge with embeddings + semantic search). Off by default.
+	rag: ${m},
+	// Companion daemon (apps/companion): drives the user's subscription CLIs for this app. Off by default.
+	companion: ${d},
+	// Outward MCP server exposing the capability layer to external agents. Off by default.
+	mcpServer: ${v},
 	seo: {
 		description: "Production-ready SaaS application",
 		foundingDate: "${new Date().getFullYear()}-01-01"
@@ -313,6 +331,7 @@ export const config: AppConfig = {
 export const mainCurrency = config.currency.list.find((c) => c.code === config.currency.base)
 	?? config.currency.list[0]!;
 
+export * from "./ai-providers";
 export * from "./billing-fields";
 export * from "./social-providers";
 export * from "./blog";
@@ -324,7 +343,7 @@ export * from "./pricing";
 export * from "./roles";
 export * from "./section-tabs";
 export * from "./tenancy";
-`,u=kt(e.projectDir,"packages/config/src/index.ts");await c(u,m),await c(kt(e.projectDir,"packages/config/src/desktop.mjs"),`// Plain-JS desktop app identity. NO env reads, so tooling that cannot import the
+`,I=Tt(e.projectDir,"packages/config/src/index.ts");await l(I,b),await l(Tt(e.projectDir,"packages/config/src/desktop.mjs"),`// Plain-JS desktop app identity. NO env reads, so tooling that cannot import the
 // TypeScript config index reads it directly: the Electron renderer + main process
 // (electron-vite bundles @repo/config/desktop) and electron-builder (Node ESM).
 // Edit these values once to rebrand - they are the same in dev and production, so
@@ -336,7 +355,7 @@ export const desktopConfig = {
   appId: "${f.appId}",
   productName: "${f.productName}",
   protocol: "${f.protocol}",
-  baseUrl: "${n}",
+  baseUrl: "${r}",
   // Name of the app's data folder (created under the OS app-data dir). Where the app
   // and its AI agents persist files - logs, gathered data, generated artifacts. Rename
   // it freely; it is a plain folder name, not a path.
@@ -358,10 +377,13 @@ export const desktopConfig = {
     oauth: {},
     // Let end users author their own background schedules on the Schedules screen.
     // Set to false to ship only builder-registered schedules.
-    userSchedules: true
+    userSchedules: true,
+    // Cap how many chat conversations are kept per agent on the user's machine;
+    // creating a new chat past this limit deletes the oldest. Set to 0 for no limit.
+    maxChatsPerAgent: 20
   }
 };
-`),await c(kt(e.projectDir,"packages/config/src/tenancy-flags.mjs"),`// Plain-JS tenancy flags. NO env reads, so tooling that cannot import the
+`),await l(Tt(e.projectDir,"packages/config/src/tenancy-flags.mjs"),`// Plain-JS tenancy flags. NO env reads, so tooling that cannot import the
 // TypeScript config index reads it directly (the Electron renderer). Mirrors the
 // desktop.mjs pattern. The config index re-exports this as config.tenancy.
 
@@ -370,11 +392,11 @@ export const tenancyConfig = ${e.multiTenancy?`{
   organizationLimit: 5,
   billingScope: "${e.billingScope}"
 }`:"{ multiTenant: false }"};
-`),e.desktop&&await c(kt(e.projectDir,"apps/desktop/dev-app-update.yml"),`provider: generic
+`),e.desktop&&await l(Tt(e.projectDir,"apps/desktop/dev-app-update.yml"),`provider: generic
 url: https://cdn.${i}/desktop
 updaterCacheDirName: ${f.protocol}-updater
-`)}import{join as Bo}from"path";function Go(e){return e==="stripe"?'					stripePriceId: "",':'					polarProductId: "",'}function Gt(e){let t=[];return e.withCredits&&(t.push(`			credits: ${e.credits},`),t.push("			creditInterval: 30,")),t.push(`			apiRateLimit: { maxRequests: ${e.rateLimit} }`),t.join(`
-`)}async function xr(e){let t=Bo(e.projectDir,"packages/config/src/pricing.ts"),r=e.defaultCurrency;if(e.paymentProvider==="none"){let u=`import type { PricingConfig } from "@repo/config/types";
+`)}import{join as gi}from"path";function hi(e){return e==="stripe"?'					stripePriceId: "",':'					polarProductId: "",'}function rn(e){let t=[];return e.withCredits&&(t.push(`			credits: ${e.credits},`),t.push("			creditInterval: 30,")),t.push(`			apiRateLimit: { maxRequests: ${e.rateLimit} }`),t.join(`
+`)}async function ir(e){let t=gi(e.projectDir,"packages/config/src/pricing.ts"),n=e.defaultCurrency;if(e.paymentProvider==="none"){let d=`import type { PricingConfig } from "@repo/config/types";
 
 export const pricingConfig: PricingConfig = {
 	defaultPlan: "free",
@@ -394,7 +416,7 @@ export const pricingConfig: PricingConfig = {
 			prices: [
 				{
 					interval: "lifetime",
-					amounts: { ${r}: 0 }
+					amounts: { ${n}: 0 }
 				}
 			],
 			apiRateLimit: { maxRequests: 100 }
@@ -403,7 +425,7 @@ export const pricingConfig: PricingConfig = {
 	credits: { enabled: false },
 	products: { enabled: false, items: [] }
 };
-`;await c(t,u);return}let n=e.paymentProvider,o=Go(n),i=e.credits,s=Gt({credits:5,rateLimit:100,withCredits:i}),a=Gt({credits:10,rateLimit:1e3,withCredits:i}),p=Gt({credits:50,rateLimit:5e3,withCredits:i}),m=`import type { PricingConfig } from "@repo/config/types";
+`;await l(t,d);return}let r=e.paymentProvider,o=hi(r),i=e.credits,a=rn({credits:5,rateLimit:100,withCredits:i}),s=rn({credits:10,rateLimit:1e3,withCredits:i}),p=rn({credits:50,rateLimit:5e3,withCredits:i}),m=`import type { PricingConfig } from "@repo/config/types";
 
 export const pricingConfig: PricingConfig = {
 	defaultPlan: "free",
@@ -424,10 +446,10 @@ export const pricingConfig: PricingConfig = {
 			prices: [
 				{
 					interval: "lifetime",
-					amounts: { ${r}: 0 }
+					amounts: { ${n}: 0 }
 				}
 			],
-${s}
+${a}
 		},
 		{
 			id: "starter",
@@ -444,16 +466,16 @@ ${s}
 				{
 ${o}
 					interval: "month",
-					amounts: { ${r}: 9 }
+					amounts: { ${n}: 9 }
 				},
 				{
 ${o}
 					interval: "year",
-					amounts: { ${r}: 90 },
-					anchorAmounts: { ${r}: 109 }
+					amounts: { ${n}: 90 },
+					anchorAmounts: { ${n}: 109 }
 				}
 			],
-${a}
+${s}
 		},
 		{
 			id: "pro",
@@ -473,15 +495,15 @@ ${a}
 				{
 ${o}
 					interval: "month",
-					amounts: { ${r}: 29 },
-					anchorAmounts: { ${r}: 39 },
+					amounts: { ${n}: 29 },
+					anchorAmounts: { ${n}: 39 },
 					featured: true
 				},
 				{
 ${o}
 					interval: "year",
-					amounts: { ${r}: 290 },
-					anchorAmounts: { ${r}: 349 }
+					amounts: { ${n}: 290 },
+					anchorAmounts: { ${n}: 349 }
 				}
 			],
 ${p}
@@ -493,12 +515,12 @@ ${i?"	credits: { enabled: true }":"	credits: { enabled: false }"},
 		items: []
 	}
 };
-`;await c(t,m)}var Ko={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]};function zo(e){let t=oe[e];return t.envVars.map((r,n)=>({key:r.name,...n===0?{comment:`# TODO: Add your ${t.label} OAuth credentials`}:{}}))}var Ho={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function Ue(e,t){return t?e.map(r=>{let n=t[r.key];return n?{...r,defaultValue:n,comment:void 0}:r}):e}function Me(e,t){for(let r of e)r.comment&&t.push(r.comment),r.defaultValue!==void 0?t.push(`${r.key}=${r.defaultValue}`):t.push(`#${r.key}=`)}function Kt(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function Cr(e){return e.architecture==="fullstack"?{apiUrl:"http://localhost:3000/api",baseUrl:"http://localhost:3000"}:{apiUrl:"http://localhost:3010",baseUrl:"http://localhost:3000"}}function Yo(e){let{architecture:t,deploymentTarget:r}=e;return t==="fullstack"?r==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://your-app.vercel.app"}:r==="node"?{frontend:"https://your-app.example.com",backend:"https://your-app.example.com"}:null:{frontend:"https://your-app.example.com",backend:"https://your-app.example.com/api"}}function St(e,t,r,n){e.push(n==="example"?`${t}=`:`${t}=${r}`)}function Dr(e,t){let r=t==="example"?void 0:e.credentials,{apiUrl:n,baseUrl:o}=Cr(e),i=[];e.architecture==="separate"?i.push("# API Configuration","# Standalone backend's own URL (the frontend reaches it via the public var above).",`API_URL=${n}`,`BASE_URL=${o}`):i.push("# App","# (API_URL is derived from the frontend's *_PUBLIC_API_URL by the runtime env schema.)",`BASE_URL=${o}`),i.push("","# Database"),Me(Ue(F[e.databaseProvider].envVars,r),i),i.push("","# Cache"),Me(Ue(ee[e.cacheProvider].envVars,r),i),i.push("","# Authentication"),t==="example"&&i.push("# Generate a strong secret, e.g. `openssl rand -hex 32`"),St(i,"BETTER_AUTH_SECRET",crypto.randomUUID(),t),i.push("","# Content API (random secret; required when contentApi feature is enabled in @repo/config)"),St(i,"CONTENT_API_KEY",Kt(32),t),i.push("","# Job Queue - Inngest","INNGEST_APP_ID=api"),St(i,"INNGEST_EVENT_KEY",Kt(32),t),St(i,"INNGEST_SIGNING_KEY",Kt(32),t),i.push("INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&(i.push("","# API Port (standalone backend)","API_PORT=3010"),i.push("","# CORS + cross-subdomain cookies (production only - leave unset for local dev)","# TRUSTED_ORIGINS=https://your-app.example.com","# AUTH_COOKIE_DOMAIN=.example.com"));let s=Ko[e.emailProvider];if(s&&(i.push("","# Email"),Me(Ue(s,r),i)),e.paymentProvider!=="none"){let a=Ho[e.paymentProvider];a&&(i.push("","# Payment"),Me(Ue(a,r),i))}if(e.socialProviders.length>0){i.push("","# Social auth");for(let a of e.socialProviders)Me(Ue(zo(a),r),i)}return e.demo&&(i.push("","# Captcha (Cloudflare Turnstile)"),Me(Ue([{key:"TURNSTILE_SECRET_KEY",comment:"# TODO: Add your Cloudflare Turnstile secret key"}],r),i)),i.push("","# Translations - OpenRouter (optional)","# Set to auto-translate en/* into your other locales with `pnpm translate`.","# The pre-commit hook runs it on commit; without a key it skips and untranslated","# locales fall back to the default locale. Get a key: https://openrouter.ai/keys","#OPENROUTER_API_KEY="),i.push("","# AI base - provider API keys (optional)","# Enable config.ai in packages/config and set the key for your chosen provider.","# OPENROUTER_API_KEY above also works as an AI provider key.","#ANTHROPIC_API_KEY=","#OPENAI_API_KEY="),i.push(""),i.join(`
-`)}function qo(e){let{apiUrl:t}=Cr(e),r=e.frontend==="nextjs"?"NEXT_PUBLIC_API_URL":"NUXT_PUBLIC_API_URL",n=["# API Configuration",`${r}=${t}`],o=Yo(e);return o&&e.architecture==="separate"&&n.push("","# Production (uncomment and replace with your deployed hostnames):",`# ${r}=${o.backend}`),n.push(""),n.join(`
-`)}async function Nr(e){let t=qo(e);await c(`${e.projectDir}/.env`,t+`
-`+Dr(e,"env")),await c(`${e.projectDir}/.env.example`,t+`
-`+Dr(e,"example"))}import{join as Jo}from"path";async function Lr(e){let t=[...e.dockerServices];if(F[e.databaseProvider].managed&&(t=t.filter(i=>i!=="postgres")),ee[e.cacheProvider].managed&&(t=t.filter(i=>i!=="redis")),t.length===0)return!1;let r=[],n=[];t.includes("postgres")&&(r.push(`  postgres:
-    image: postgres:18-alpine
+`;await l(t,m)}var yi={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"},{key:"SMTP_USER"},{key:"SMTP_PASSWORD"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]};function vi(e){let t=se[e];return t.envVars.map((n,r)=>({key:n.name,...r===0?{comment:`# TODO: Add your ${t.label} OAuth credentials`}:{}}))}var ki={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function Ge(e,t){return t?e.map(n=>{let r=t[n.key];return r?{...n,defaultValue:r,comment:void 0}:n}):e}function He(e,t){for(let n of e)n.comment&&t.push(n.comment),n.defaultValue!==void 0?t.push(`${n.key}=${n.defaultValue}`):t.push(`#${n.key}=`)}function on(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function sr(e){return e.architecture==="fullstack"?{apiUrl:"http://localhost:3000/api",baseUrl:"http://localhost:3000"}:{apiUrl:"http://localhost:3010",baseUrl:"http://localhost:3000"}}function wi(e){let{architecture:t,deploymentTarget:n}=e;return t==="fullstack"?n==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://your-app.vercel.app"}:n==="node"?{frontend:"https://your-app.example.com",backend:"https://your-app.example.com"}:null:{frontend:"https://your-app.example.com",backend:"https://your-app.example.com/api"}}function Rt(e,t,n,r){e.push(r==="example"?`${t}=`:`${t}=${n}`)}function ar(e,t){let n=t==="example"?void 0:e.credentials,{apiUrl:r,baseUrl:o}=sr(e),i=[];e.architecture==="separate"?i.push("# API Configuration","# Standalone backend's own URL (the frontend reaches it via the public var above).",`API_URL=${r}`,`BASE_URL=${o}`):i.push("# App","# (API_URL is derived from the frontend's *_PUBLIC_API_URL by the runtime env schema.)",`BASE_URL=${o}`),i.push("","# Database"),He(Ge(G[e.databaseProvider].envVars,n),i),i.push("","# Cache"),He(Ge(re[e.cacheProvider].envVars,n),i),i.push("","# Authentication"),t==="example"&&i.push("# Generate a strong secret, e.g. `openssl rand -hex 32`"),Rt(i,"BETTER_AUTH_SECRET",crypto.randomUUID(),t),i.push("","# Content API (random secret; required when contentApi feature is enabled in @repo/config)"),Rt(i,"CONTENT_API_KEY",on(32),t),i.push("","# Job Queue - Inngest","INNGEST_APP_ID=api"),Rt(i,"INNGEST_EVENT_KEY",on(32),t),Rt(i,"INNGEST_SIGNING_KEY",on(32),t),i.push("INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&(i.push("","# API Port (standalone backend)","API_PORT=3010"),i.push("","# CORS + cross-subdomain cookies (production only - leave unset for local dev)","# TRUSTED_ORIGINS=https://your-app.example.com","# AUTH_COOKIE_DOMAIN=.example.com"));let a=yi[e.emailProvider];if(a&&(i.push("","# Email"),He(Ge(a,n),i)),e.paymentProvider!=="none"){let s=ki[e.paymentProvider];s&&(i.push("","# Payment"),He(Ge(s,n),i))}if(e.socialProviders.length>0){i.push("","# Social auth");for(let s of e.socialProviders)He(Ge(vi(s),n),i)}return e.demo&&(i.push("","# Captcha (Cloudflare Turnstile)"),He(Ge([{key:"TURNSTILE_SECRET_KEY",comment:"# TODO: Add your Cloudflare Turnstile secret key"}],n),i)),i.push("","# Translations - OpenRouter (optional)","# Set to auto-translate en/* into your other locales with `pnpm translate`.","# The pre-commit hook runs it on commit; without a key it skips and untranslated","# locales fall back to the default locale. Get a key: https://openrouter.ai/keys","#OPENROUTER_API_KEY="),i.push("","# AI base - provider API keys (optional)","# Enable config.ai in packages/config and set the key for your chosen provider.","# OPENROUTER_API_KEY above also works as an AI provider key.","#ANTHROPIC_API_KEY=","#OPENAI_API_KEY="),i.push(""),i.join(`
+`)}function bi(e){let{apiUrl:t}=sr(e),n=e.frontend==="nextjs"?"NEXT_PUBLIC_API_URL":"NUXT_PUBLIC_API_URL",r=["# API Configuration",`${n}=${t}`],o=wi(e);return o&&e.architecture==="separate"&&r.push("","# Production (uncomment and replace with your deployed hostnames):",`# ${n}=${o.backend}`),r.push(""),r.join(`
+`)}async function cr(e){let t=bi(e);await l(`${e.projectDir}/.env`,t+`
+`+ar(e,"env")),await l(`${e.projectDir}/.env.example`,t+`
+`+ar(e,"example"))}import{join as Si}from"path";async function lr(e){let t=[...e.dockerServices];if(G[e.databaseProvider].managed&&(t=t.filter(i=>i!=="postgres")),re[e.cacheProvider].managed&&(t=t.filter(i=>i!=="redis")),t.length===0)return!1;let n=[],r=[];t.includes("postgres")&&(n.push(`  postgres:
+    image: pgvector/pgvector:pg18
     ports:
       - "\${POSTGRES_PORT:-5432}:5432"
     environment:
@@ -512,7 +534,7 @@ ${i?"	credits: { enabled: true }":"	credits: { enabled: false }"},
       test: ["CMD-SHELL", "pg_isready -U postgres"]
       interval: 5s
       timeout: 5s
-      retries: 5`),n.push("  postgres_data:")),t.includes("redis")&&(r.push(`  redis:
+      retries: 5`),r.push("  postgres_data:")),t.includes("redis")&&(n.push(`  redis:
     image: redis:8-alpine
     ports:
       - "\${REDIS_PORT:-6379}:6379"
@@ -522,27 +544,27 @@ ${i?"	credits: { enabled: true }":"	credits: { enabled: false }"},
       test: ["CMD", "redis-cli", "ping"]
       interval: 5s
       timeout: 5s
-      retries: 5`),n.push("  redis_data:")),t.includes("mailpit")&&r.push(`  mailpit:
+      retries: 5`),r.push("  redis_data:")),t.includes("mailpit")&&n.push(`  mailpit:
     image: axllent/mailpit
     ports:
       - "\${MAILPIT_SMTP_PORT:-1025}:1025"
       - "\${MAILPIT_UI_PORT:-8025}:8025"
     environment:
       MP_SMTP_AUTH_ACCEPT_ANY: 1
-      MP_SMTP_AUTH_ALLOW_INSECURE: 1`),t.includes("inngest")&&r.push(`  inngest:
+      MP_SMTP_AUTH_ALLOW_INSECURE: 1`),t.includes("inngest")&&n.push(`  inngest:
     image: inngest/inngest:v1.17.4
     ports:
       - "\${INNGEST_PORT:-8288}:8288"
     command: inngest dev`);let o=`services:
-${r.join(`
+${n.join(`
 
 `)}
-`;return n.length>0&&(o+=`
+`;return r.length>0&&(o+=`
 volumes:
-${n.join(`
+${r.join(`
 `)}
-`),await c(Jo(e.projectDir,"infra/docker-compose.yml"),o),!0}import{join as Wo}from"path";function Xo(e){let t=[];e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let r=e.frontend==="nextjs"?"Next.js":"Nuxt";if(t.push({type:"node-terminal",request:"launch",name:r,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend==="nextjs"?"next":"nuxt"}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.docs&&t.push({type:"node-terminal",request:"launch",name:"Docs",command:"pnpm dev",cwd:"${workspaceFolder}/apps/docs",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.desktop){let n=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Desktop",command:"pnpm dev",cwd:"${workspaceFolder}/apps/desktop",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development",BASE_URL:"http://localhost:3000",PUBLIC_API_URL:n}})}if(t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Mail",command:"pnpm dev:mail",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.paymentProvider==="stripe"){let n=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${n}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Zo(e){let t=e.frontend==="nextjs"?"Next.js":"Nuxt",r=[];return e.architecture==="separate"?r.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):r.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),r}async function $r(e){let t={version:"0.2.0",configurations:Xo(e),compounds:Zo(e)};await c(Wo(e.projectDir,".vscode/launch.json"),JSON.stringify(t,null,"	")+`
-`)}import{join as Qo}from"path";async function jr(e){if(e.architecture!=="separate")return;await c(Qo(e.projectDir,"apps/backend/src/index.ts"),`import { serve } from "@hono/node-server";
+`),await l(Si(e.projectDir,"infra/docker-compose.yml"),o),!0}import{join as Ei}from"path";function Ai(e){let t=[];t.push({type:"node-terminal",request:"launch",name:"Dev",command:"pnpm dev",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let n=e.frontend==="nextjs"?"Next.js":"Nuxt";if(t.push({type:"node-terminal",request:"launch",name:n,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend==="nextjs"?"next":"nuxt"}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.docs&&t.push({type:"node-terminal",request:"launch",name:"Docs",command:"pnpm dev",cwd:"${workspaceFolder}/apps/docs",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.desktop){let r=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Desktop",command:"pnpm dev",cwd:"${workspaceFolder}/apps/desktop",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development",BASE_URL:"http://localhost:3000",PUBLIC_API_URL:r}})}if(t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Mail",command:"pnpm dev:mail",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.companion){let r=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Companion",command:`pnpm cli serve --url ${r}`,cwd:"${workspaceFolder}/apps/companion",skipFiles:["<node_internals>/**"]})}if(e.paymentProvider==="stripe"){let r=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${r}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Ii(e){let t=e.frontend==="nextjs"?"Next.js":"Nuxt",n=[];return e.architecture==="separate"?n.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):n.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),n}async function pr(e){let t={version:"0.2.0",configurations:Ai(e),compounds:Ii(e)};await l(Ei(e.projectDir,".vscode/launch.json"),JSON.stringify(t,null,"	")+`
+`)}import{join as Pi}from"path";async function dr(e){if(e.architecture!=="separate")return;await l(Pi(e.projectDir,"apps/backend/src/index.ts"),`import { serve } from "@hono/node-server";
 import app from "@repo/api";
 import { closeRedis, env, logger } from "@repo/runtime";
 
@@ -573,65 +595,12 @@ bootstrap().catch((error) => {
 	logger.error("[Backend] Fatal error", error);
 	process.exit(1);
 });
-`)}import{readFile as ei}from"fs/promises";import{join as ti}from"path";var ri=`export * from "./db/auth";
-export * from "./db/schema";
-export type { User, Account, Organization, Member } from "./db/auth";`;async function Ur(e){let t=ti(e.projectDir,"packages/database/src/index.ts"),r=ri;try{let o=await ei(t,"utf-8"),i=ni(o);i&&(r=i)}catch{}let n;switch(e.databaseProvider){case"postgres":n=oi(r);break;case"neon":n=ii(r);break;case"supabase":n=si(r);break}await c(t,n)}function ni(e){return e.split(`
-`).filter(n=>n.startsWith("export type ")||n.startsWith("export * from")).join(`
-`)}var zt=`
-/** Extract affected-row count from a delete/update result (works for pg + postgres-js). */
-export function affectedRowCount(result: unknown): number {
-	if (typeof result !== "object" || result === null) return 0;
-	const r = result as { rowCount?: number; count?: number };
-	return r.rowCount ?? r.count ?? 0;
-}
-`;function oi(e){return`import { drizzle } from "drizzle-orm/node-postgres";
-import { z } from "zod";
-import * as authSchema from "./db/auth";
-import * as appSchema from "./db/schema";
-
-const schema = { ...authSchema, ...appSchema };
-export { schema };
-
-const parsed = z.object({ DATABASE_URL: z.url() }).safeParse({ DATABASE_URL: process.env.DATABASE_URL });
-if (!parsed.success) throw new Error("DATABASE_URL is not set or invalid");
-
-export const db = drizzle(parsed.data.DATABASE_URL, { schema });
-export const pool = db.$client;
-
-${e}
-${zt}`}function ii(e){return`import { neon } from "@neondatabase/serverless";
-import { drizzle } from "drizzle-orm/neon-http";
-import { z } from "zod";
-import * as authSchema from "./db/auth";
-import * as appSchema from "./db/schema";
-
-const schema = { ...authSchema, ...appSchema };
-export { schema };
-
-const parsed = z.object({ DATABASE_URL: z.url() }).safeParse({ DATABASE_URL: process.env.DATABASE_URL });
-if (!parsed.success) throw new Error("DATABASE_URL is not set or invalid");
-
-const sql = neon(parsed.data.DATABASE_URL);
-export const db = drizzle(sql, { schema });
-
-${e}
-${zt}`}function si(e){return`import { drizzle } from "drizzle-orm/postgres-js";
-import postgres from "postgres";
-import { z } from "zod";
-import * as authSchema from "./db/auth";
-import * as appSchema from "./db/schema";
-
-const schema = { ...authSchema, ...appSchema };
-export { schema };
-
-const parsed = z.object({ DATABASE_URL: z.url() }).safeParse({ DATABASE_URL: process.env.DATABASE_URL });
-if (!parsed.success) throw new Error("DATABASE_URL is not set or invalid");
-
-const client = postgres(parsed.data.DATABASE_URL);
-export const db = drizzle(client, { schema });
-
-${e}
-${zt}`}import{join as wt}from"path";async function Mr(e){switch(e.cacheProvider){case"redis":await ai(e),await ci(e);break;case"upstash":await li(e),await pi(e);break}}async function ai(e){await c(wt(e.projectDir,"packages/runtime/src/redis.ts"),`import type { Store } from "hono-rate-limiter";
+`)}import{readFile as Ti}from"fs/promises";import{join as Ri}from"path";var an='import { drizzle } from "drizzle-orm/node-postgres";',sn=`export const db = drizzle(parsed.data.DATABASE_URL, { schema });
+export const pool = db.$client;`,_i={postgres:{importLine:an,instantiation:sn},neon:{importLine:`import { neon } from "@neondatabase/serverless";
+import { drizzle } from "drizzle-orm/neon-http";`,instantiation:`const sql = neon(parsed.data.DATABASE_URL);
+export const db = drizzle(sql, { schema });`},supabase:{importLine:`import { drizzle } from "drizzle-orm/postgres-js";
+import postgres from "postgres";`,instantiation:`const client = postgres(parsed.data.DATABASE_URL);
+export const db = drizzle(client, { schema });`}};async function ur(e){let t=Ri(e.projectDir,"packages/database/src/index.ts"),n=await Ti(t,"utf-8");if(!n.includes(an)||!n.includes(sn))throw new Error("generateDbDriver: boilerplate packages/database/src/index.ts is missing the node-postgres driver anchors (the import line or the `db` instantiation block); the boilerplate drifted.");let r=_i[e.databaseProvider],o=n.replace(an,r.importLine).replace(sn,r.instantiation);await l(t,o)}import{join as _t}from"path";async function mr(e){switch(e.cacheProvider){case"redis":await Oi(e),await xi(e);break;case"upstash":await Ci(e),await Di(e);break}}async function Oi(e){await l(_t(e.projectDir,"packages/runtime/src/redis.ts"),`import type { Store } from "hono-rate-limiter";
 import { Redis } from "ioredis";
 import { RedisStore, type RedisReply } from "rate-limit-redis";
 import { env } from "./env";
@@ -755,7 +724,7 @@ export async function closeRedis() {
 		closed = true;
 	}
 }
-`)}async function ci(e){await c(wt(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Mutex } from "redis-semaphore";
+`)}async function xi(e){await l(_t(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Mutex } from "redis-semaphore";
 import { redis } from "./redis";
 
 export class MutexTimeoutError extends Error {
@@ -792,7 +761,7 @@ export async function withMutex<T>(
 		await mutex.release();
 	}
 }
-`)}async function li(e){await c(wt(e.projectDir,"packages/runtime/src/redis.ts"),`import { Redis } from "@upstash/redis";
+`)}async function Ci(e){await l(_t(e.projectDir,"packages/runtime/src/redis.ts"),`import { Redis } from "@upstash/redis";
 import type { Store } from "hono-rate-limiter";
 import { env } from "./env";
 
@@ -905,7 +874,7 @@ export const limiterStore: Store = createLimiterStore();
 
 /** No persistent connection to close with Upstash REST. */
 export async function closeRedis(): Promise<void> {}
-`)}async function pi(e){await c(wt(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Lock } from "@upstash/lock";
+`)}async function Di(e){await l(_t(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Lock } from "@upstash/lock";
 import { redis } from "./redis";
 
 export class MutexTimeoutError extends Error {
@@ -950,7 +919,7 @@ export async function withMutex<T>(
 		await lock.release();
 	}
 }
-`)}async function Vr(e){await c(`${e.projectDir}/packages/runtime/src/env.ts`,di(e))}function di(e){return`import { z } from "zod";
+`)}async function fr(e){await l(`${e.projectDir}/packages/runtime/src/env.ts`,Ni(e))}function Ni(e){return`import { z } from "zod";
 
 const EnvSchema = z.object({
 	NODE_ENV: z.enum(["development", "production"]).default("development"),
@@ -999,6 +968,8 @@ ${e.cacheProvider==="upstash"?`	UPSTASH_REDIS_REST_URL: z.string(),
 
 	SMTP_HOST: z.string().optional(),
 	SMTP_PORT: z.coerce.number().int().positive().optional(),
+	SMTP_USER: z.string().optional(),
+	SMTP_PASSWORD: z.string().optional(),
 
 	TWILIO_ACCOUNT_SID: z.string().optional(),
 	TWILIO_AUTH_TOKEN: z.string().optional(),
@@ -1069,17 +1040,17 @@ export const env = (() => {
 const parsedApiUrl = new URL(env.API_URL);
 export const apiBasePath = parsedApiUrl.pathname === "/" ? "" : parsedApiUrl.pathname;
 export const apiOrigin = parsedApiUrl.origin;
-`}import{readFile as ui}from"fs/promises";import{join as te}from"path";var Et={"@upstash/redis":"^1.37.0","@upstash/lock":"^0.2.1","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7"};async function Fe(e){let t=await ui(e,"utf-8");return JSON.parse(t)}async function Be(e,t){await c(e,JSON.stringify(t,null,"	")+`
-`)}function rt(e,t){for(let r of t)delete e.dependencies?.[r],delete e.devDependencies?.[r]}function Ve(e,t,r,n=!1){let o=n?"devDependencies":"dependencies";e[o]||(e[o]={}),e[o][t]=r}async function Fr(e){await mi(e),await fi(e),await gi(e),await hi(e),e.frontend==="nextjs"?await vi(e):await yi(e)}async function mi(e){let t=te(e.projectDir,"packages/api/package.json"),r=await Fe(t);rt(r,["sharp","@types/sharp"]),await Be(t,r)}async function fi(e){let t=te(e.projectDir,"packages/runtime/package.json"),r=await Fe(t);e.cacheProvider==="upstash"&&(rt(r,["ioredis","rate-limit-redis","redis-semaphore"]),Ve(r,"@upstash/redis",Et["@upstash/redis"]),Ve(r,"@upstash/lock",Et["@upstash/lock"])),await Be(t,r)}async function gi(e){let t=te(e.projectDir,"packages/database/package.json"),r=await Fe(t);e.databaseProvider==="neon"?(rt(r,["pg","@types/pg"]),Ve(r,"@neondatabase/serverless",Et["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(rt(r,["pg","@types/pg"]),Ve(r,"postgres",Et.postgres)),await Be(t,r)}async function hi(e){if(e.architecture!=="separate")return;let t=te(e.projectDir,"apps/backend/package.json"),r=await Fe(t);e.deploymentTarget!=="node"&&rt(r,["@hono/node-server"]),await Be(t,r)}async function yi(e){if(e.architecture!=="separate")return;let t=te(e.projectDir,"apps/web-nuxt");await Bt(te(t,"server/api/[...paths].ts"),t);let r=te(t,"package.json"),n=await Fe(r),o=n.dependencies?.["@repo/api"];o&&(delete n.dependencies?.["@repo/api"],Ve(n,"@repo/api",o,!0)),await Be(r,n)}async function vi(e){if(e.architecture!=="separate")return;let t=te(e.projectDir,"apps/web-next");await Bt(te(t,"app/api/[[...rest]]/route.ts"),t);let r=te(t,"package.json"),n=await Fe(r),o=n.dependencies?.["@repo/api"];o&&(delete n.dependencies?.["@repo/api"],Ve(n,"@repo/api",o,!0)),await Be(r,n)}import{readFile as Gr}from"fs/promises";import{join as Kr}from"path";async function zr(e){let t=Kr(e.projectDir,"turbo.json"),r;try{r=await Gr(t,"utf-8")}catch{return}let n=JSON.parse(r),o=n.tasks?.build;if(!o)return;let i=e.frontend==="nextjs"?"NUXT_PUBLIC_*":"NEXT_PUBLIC_*",s=e.frontend==="nextjs"?new Set([".nuxt/**",".output/**"]):new Set([".next/**","!.next/cache/**"]),a=!1;if(Array.isArray(o.env)){let p=o.env.filter(f=>f!==i);p.length!==o.env.length&&(o.env=p,a=!0)}if(Array.isArray(o.outputs)){let p=o.outputs.filter(f=>!s.has(f));p.length!==o.outputs.length&&(o.outputs=p,a=!0)}a&&await c(t,JSON.stringify(n,null,"	")+`
-`)}var bi=["base.json","node.json","next.json"],Br="GenerateSaaS ";async function Hr(e){if(!e.demo)for(let t of bi){let r=Kr(e.projectDir,"tooling/typescript",t),n;try{n=await Gr(r,"utf-8")}catch{continue}let o=JSON.parse(n);typeof o.display!="string"||!o.display.startsWith(Br)||(o.display=o.display.slice(Br.length),await c(r,JSON.stringify(o,null,"	")+`
-`))}}import{readFile as ki,rm as Si}from"fs/promises";import{existsSync as Yr}from"fs";import{join as qr}from"path";async function Jr(e){if(e.frontend==="nuxt")return;let t=qr(e.projectDir,"packages/i18n/package.json");if(!Yr(t))throw new Error(`pruneI18nNuxt: expected ${t} to exist - did the i18n package move?`);let r=JSON.parse(await ki(t,"utf-8")),n=!!(r.exports?.["./module"]??r.exports?.["./nuxt"]),o=!1;if(r.exports)for(let s of["./module","./nuxt"])s in r.exports&&(delete r.exports[s],o=!0);r.devDependencies&&"@nuxt/kit"in r.devDependencies&&(delete r.devDependencies["@nuxt/kit"],o=!0),o&&await c(t,JSON.stringify(r,null,"	")+`
-`);let i=qr(e.projectDir,"packages/i18n/nuxt");if(n&&!Yr(i))throw new Error(`pruneI18nNuxt: packages/i18n declares a Nuxt export surface but ${i} is missing - did the i18n Nuxt module move?`);await Si(i,{recursive:!0,force:!0})}import{readFile as Wr,rm as wi}from"fs/promises";import{join as Ht}from"path";async function Xr(e){e.cacheProvider==="upstash"&&await Promise.all([Ei(e.projectDir),Ai(e.projectDir),wi(Ht(e.projectDir,"packages/runtime/tests/redis.test.ts"),{force:!0})])}async function Ei(e){let t=Ht(e,"packages/runtime/tests/setup.ts"),r;try{r=await Wr(t,"utf-8")}catch{return}let n=r.replace(/\tREDIS_URL:\s*"[^"]*",?\n/,`	UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
+`}import{readFile as Li}from"fs/promises";import{join as oe}from"path";var Ot={"@upstash/redis":"^1.37.0","@upstash/lock":"^0.2.1","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7"};async function Ye(e){let t=await Li(e,"utf-8");return JSON.parse(t)}async function qe(e,t){await l(e,JSON.stringify(t,null,"	")+`
+`)}function ct(e,t){for(let n of t)delete e.dependencies?.[n],delete e.devDependencies?.[n]}function ze(e,t,n,r=!1){let o=r?"devDependencies":"dependencies";e[o]||(e[o]={}),e[o][t]=n}async function gr(e){await $i(e),await ji(e),await Ui(e),await Mi(e),e.frontend==="nextjs"?await Fi(e):await Vi(e)}async function $i(e){let t=oe(e.projectDir,"packages/api/package.json"),n=await Ye(t);ct(n,["sharp","@types/sharp"]),await qe(t,n)}async function ji(e){let t=oe(e.projectDir,"packages/runtime/package.json"),n=await Ye(t);e.cacheProvider==="upstash"&&(ct(n,["ioredis","rate-limit-redis","redis-semaphore"]),ze(n,"@upstash/redis",Ot["@upstash/redis"]),ze(n,"@upstash/lock",Ot["@upstash/lock"])),await qe(t,n)}async function Ui(e){let t=oe(e.projectDir,"packages/database/package.json"),n=await Ye(t);e.databaseProvider==="neon"?(ct(n,["pg","@types/pg"]),ze(n,"@neondatabase/serverless",Ot["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(ct(n,["pg","@types/pg"]),ze(n,"postgres",Ot.postgres)),await qe(t,n)}async function Mi(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/backend/package.json"),n=await Ye(t);e.deploymentTarget!=="node"&&ct(n,["@hono/node-server"]),await qe(t,n)}async function Vi(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/web-nuxt");await nn(oe(t,"server/api/[...paths].ts"),t);let n=oe(t,"package.json"),r=await Ye(n),o=r.dependencies?.["@repo/api"];o&&(delete r.dependencies?.["@repo/api"],ze(r,"@repo/api",o,!0)),await qe(n,r)}async function Fi(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/web-next");await nn(oe(t,"app/api/[[...rest]]/route.ts"),t);let n=oe(t,"package.json"),r=await Ye(n),o=r.dependencies?.["@repo/api"];o&&(delete r.dependencies?.["@repo/api"],ze(r,"@repo/api",o,!0)),await qe(n,r)}import{readFile as yr}from"fs/promises";import{join as vr}from"path";async function kr(e){let t=vr(e.projectDir,"turbo.json"),n;try{n=await yr(t,"utf-8")}catch{return}let r=JSON.parse(n),o=r.tasks?.build;if(!o)return;let i=e.frontend==="nextjs"?"NUXT_PUBLIC_*":"NEXT_PUBLIC_*",a=e.frontend==="nextjs"?new Set([".nuxt/**",".output/**"]):new Set([".next/**","!.next/cache/**"]),s=!1;if(Array.isArray(o.env)){let p=o.env.filter(f=>f!==i);p.length!==o.env.length&&(o.env=p,s=!0)}if(Array.isArray(o.outputs)){let p=o.outputs.filter(f=>!a.has(f));p.length!==o.outputs.length&&(o.outputs=p,s=!0)}s&&await l(t,JSON.stringify(r,null,"	")+`
+`)}var Bi=["base.json","node.json","next.json"],hr="GenerateSaaS ";async function wr(e){if(!e.demo)for(let t of Bi){let n=vr(e.projectDir,"tooling/typescript",t),r;try{r=await yr(n,"utf-8")}catch{continue}let o=JSON.parse(r);typeof o.display!="string"||!o.display.startsWith(hr)||(o.display=o.display.slice(hr.length),await l(n,JSON.stringify(o,null,"	")+`
+`))}}import{readFile as Ki,rm as Gi}from"fs/promises";import{existsSync as br}from"fs";import{join as Sr}from"path";async function Er(e){if(e.frontend==="nuxt")return;let t=Sr(e.projectDir,"packages/i18n/package.json");if(!br(t))throw new Error(`pruneI18nNuxt: expected ${t} to exist - did the i18n package move?`);let n=JSON.parse(await Ki(t,"utf-8")),r=!!(n.exports?.["./module"]??n.exports?.["./nuxt"]),o=!1;if(n.exports)for(let a of["./module","./nuxt"])a in n.exports&&(delete n.exports[a],o=!0);n.devDependencies&&"@nuxt/kit"in n.devDependencies&&(delete n.devDependencies["@nuxt/kit"],o=!0),o&&await l(t,JSON.stringify(n,null,"	")+`
+`);let i=Sr(e.projectDir,"packages/i18n/nuxt");if(r&&!br(i))throw new Error(`pruneI18nNuxt: packages/i18n declares a Nuxt export surface but ${i} is missing - did the i18n Nuxt module move?`);await Gi(i,{recursive:!0,force:!0})}import{readFile as Ar,rm as Hi}from"fs/promises";import{join as cn}from"path";async function Ir(e){e.cacheProvider==="upstash"&&await Promise.all([zi(e.projectDir),Yi(e.projectDir),Hi(cn(e.projectDir,"packages/runtime/tests/redis.test.ts"),{force:!0})])}async function zi(e){let t=cn(e,"packages/runtime/tests/setup.ts"),n;try{n=await Ar(t,"utf-8")}catch{return}let r=n.replace(/\tREDIS_URL:\s*"[^"]*",?\n/,`	UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
 	UPSTASH_REDIS_REST_TOKEN: "test-token",
-`);n!==r&&await c(t,n)}async function Ai(e){let t=Ht(e,"packages/api/tests/setup.ts"),r;try{r=await Wr(t,"utf-8")}catch{return}let n=r;n=n.replace(/\tREDIS_URL:\s*"[^"]*",?\n/g,`	UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
+`);r!==n&&await l(t,r)}async function Yi(e){let t=cn(e,"packages/api/tests/setup.ts"),n;try{n=await Ar(t,"utf-8")}catch{return}let r=n;r=r.replace(/\tREDIS_URL:\s*"[^"]*",?\n/g,`	UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
 	UPSTASH_REDIS_REST_TOKEN: "test-token",
-`),n=n.replace(/vi\.mock\("ioredis"[\s\S]*?\n\}\);\n\n?/,""),n=n.replace(/vi\.mock\("rate-limit-redis"[\s\S]*?\n\}\);\n\n?/,""),n=n.replace(/\t\t\tREDIS_URL:\s*"[^"]*",?\n/,`			UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
+`),r=r.replace(/vi\.mock\("ioredis"[\s\S]*?\n\}\);\n\n?/,""),r=r.replace(/vi\.mock\("rate-limit-redis"[\s\S]*?\n\}\);\n\n?/,""),r=r.replace(/\t\t\tREDIS_URL:\s*"[^"]*",?\n/,`			UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
 			UPSTASH_REDIS_REST_TOKEN: "test-token",
-`),n=n.replace(/(^vi\.mock\("@repo\/runtime")/m,`vi.mock("@upstash/redis", () => {
+`),r=r.replace(/(^vi\.mock\("@repo\/runtime")/m,`vi.mock("@upstash/redis", () => {
 	class Redis {
 		get = vi.fn().mockResolvedValue(null);
 		set = vi.fn().mockResolvedValue("OK");
@@ -1096,20 +1067,67 @@ vi.mock("@upstash/lock", () => {
 	return { Lock };
 });
 
-$1`),n!==r&&await c(t,n)}import{readdir as Yt,readFile as j,rm as S}from"fs/promises";import{join as g}from"path";var Ii=new Set(["ci.yml","desktop-release.yml"]),Pi=["cli","cli:clean","demo:bench","playground:regen","playground:test","playground:test:units","playground:test:build"];async function en(e){let t=g(e.projectDir,".github/workflows"),r=await Yt(t).catch(()=>[]);for(let n of r)Ii.has(n)||await S(g(t,n),{recursive:!0,force:!0})}async function tn(e){let t=g(e.projectDir,"package.json"),r=await j(t,"utf-8"),n=JSON.parse(r),o=!1;if(n.scripts){for(let i of Pi)i in n.scripts&&(delete n.scripts[i],o=!0);if(!dt(e))for(let i of["infra","infra:stop"])i in n.scripts&&(delete n.scripts[i],o=!0)}o&&await c(t,JSON.stringify(n,null,"	")+`
-`)}async function rn(e){let t=e.frontend==="nextjs"?"apps/web-nuxt":"apps/web-next";await S(g(e.projectDir,t),{recursive:!0,force:!0})}async function nn(e){e.docs||await S(g(e.projectDir,"apps/docs"),{recursive:!0})}async function on(e){let t=e.frontend==="nextjs"?"docs/nuxt":"docs/next";if(await S(g(e.projectDir,t),{recursive:!0,force:!0}),await S(g(e.projectDir,"docs/index.mdx")),!e.desktop)await S(g(e.projectDir,"docs/desktop"),{recursive:!0,force:!0});else if(!e.desktopAi){await S(g(e.projectDir,"docs/desktop/ai"),{recursive:!0,force:!0});let r=g(e.projectDir,"docs/desktop/meta.json"),n=JSON.parse(await j(r,"utf-8"));n.pages=n.pages.filter(o=>o!=="ai"),await c(r,`${JSON.stringify(n,null,2)}
-`)}}async function sn(e){if(e.desktop)return;await S(g(e.projectDir,"apps/desktop"),{recursive:!0});let t=g(e.projectDir,"packages/i18n/translations");for(let r of await Yt(t,{withFileTypes:!0}))r.isDirectory()&&await S(g(t,r.name,"desktop.json"),{force:!0});await S(g(e.projectDir,".github/workflows/desktop-release.yml"))}var Zr=`
+$1`),r!==n&&await l(t,r)}import{readdir as fn,readFile as j,rm as w}from"fs/promises";import{join as h}from"path";import{readFile as Ct,rm as qi}from"fs/promises";import{join as xt}from"path";function Ji(e){return new RegExp(`^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-start(?: \\*\\/\\})?[ \\t]*\\r?\\n[\\s\\S]*?^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-end(?: \\*\\/\\})?[ \\t]*\\r?\\n`,"gm")}function J(e,t,n="ai",r="stripDesktopAi"){let o=Ji(n);if(e.match(o)===null)throw new Error(`${r}: expected gsaas ${n} markers in ${t}, but found none (boilerplate drift).`);let i=e.replace(o,"");if(i.includes(`gsaas:${n}-start`)||i.includes(`gsaas:${n}-end`))throw new Error(`${r}: an unbalanced gsaas ${n} marker is left in ${t} (boilerplate drift).`);return i.replace(/\n{3,}/g,`
+
+`)}async function _(e,t,n,r,o){let i=await Ct(e,"utf-8"),a=i.indexOf(t);if(a===-1)throw new Error(`${o}: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(i.indexOf(t,a+t.length)!==-1)throw new Error(`${o}: the ${r} seam appears more than once (boilerplate drift).`);await l(e,i.slice(0,a)+n+i.slice(a+t.length))}function lt(e,t,n,r){if(!(t in e))throw new Error(`${r}: expected ${n} (boilerplate drift).`);delete e[t]}function Dt(e){return e.frontend==="nextjs"?"next":"nuxt"}async function Nt(e,t,n,r,o,i){let a=xt(e,"docs",t);await qi(xt(a,`${n}.mdx`)),await _(xt(a,"meta.json"),`    "${n}",
+`,"",`${t} meta.json ${n} nav entry`,o);let s=xt(a,"ai.mdx"),f=(await Ct(s,"utf-8")).split(`
+`).find(m=>m.includes(`href="${r}"`));if(f===void 0)throw new Error(`${o}: expected the ai.mdx card linking to ${r} (boilerplate drift).`);if(await _(s,`${f}
+`,"",`${t} ai.mdx ${n} card`,o),i!==void 0){let m=`| **${i}** |`,v=(await Ct(s,"utf-8")).split(`
+`).find(b=>b.startsWith(m));if(v===void 0)throw new Error(`${o}: expected the ai.mdx "${i}" hub-table row (boilerplate drift).`);await _(s,`${v}
+`,"",`${t} ai.mdx ${i} hub-table row`,o)}}async function Lt(e){let t=`import { config } from "@repo/config";
+`,n=await Ct(e,"utf-8");if(!n.includes(t))return;let r=n.replace(t,""),o=r.replace(/\/\*[\s\S]*?\*\//g,"").replace(/\/\/[^\n]*/g,"").replace(/"(?:\\.|[^"\\])*"/g,'""').replace(/'(?:\\.|[^'\\])*'/g,"''").replace(/`(?:\\.|[^`\\])*`/g,"``");/\bconfig\b/.test(o)||await l(e,r)}import{readFile as Wi}from"fs/promises";import{join as Xi}from"path";async function ln(e){if(e.rag)return;let t=Xi(e.projectDir,"packages/config/src/index.ts"),n=await Wi(t,"utf-8");if(!/rag:\s*\{\s*enabled:\s*false\s*\}/.test(n))throw new Error("stripRag: expected `config.rag` emitted with `enabled: false` for a rag-off build, but it was missing (generator drift).")}import{readFile as Pr,rm as pn}from"fs/promises";import{join as Re}from"path";async function dn(e){if(e.mcpServer)return;let t=e.projectDir,n="stripMcpServer";await pn(Re(t,"packages/api/src/routes/internal/ai/mcp.ts")),await pn(Re(t,"packages/api/tests/routes/mcp.test.ts")),await pn(Re(t,"packages/auth/src/mcp.ts"));let r=Re(t,"packages/api/src/routes/internal/index.ts");await _(r,`import mcpRoutes from "./ai/mcp";
+`,"","internal router mcp import",n),await _(r,'\n// Outward MCP server (`/mcp` + its OAuth `.well-known` discovery), gated on `config.mcpServer`.\n// Mounted at the API root so the discovery metadata sits at `{apiBasePath}/.well-known/...` where\n// an external agent probes it. Off by default, so the routes are absent entirely when disabled. It\n// is not chained into the typed router above: external agents (not the typed RPC client) call it,\n// so it needs no `AppType` inference, and gating it keeps the feature truly inert when off.\nif (config.mcpServer?.enabled) {\n	app.route("/", mcpRoutes);\n}\n',"","internal router mcp mount",n),await Lt(r);let o=Re(t,"packages/auth/src/config.ts");await _(o,`	magicLink,
+	mcp,
+	organization,`,`	magicLink,
+	organization,`,"auth config mcp plugin import",n),await _(o,`		// Outward MCP server: turns Better Auth into an OAuth 2.1 provider so an
+		// external agent (Hermes/OpenClaw) can authenticate and drive the app's
+		// capability layer over MCP. Brings the oauthApplication/oauthAccessToken/
+		// oauthConsent tables (run \`pnpm auth:generate\` after toggling).
+		...(config.mcpServer?.enabled
+			? [mcp({ loginPage: \`\${config.baseUrl}\${config.routes.auth}/login\` })]
+			: []),
+`,"","auth config mcp plugin block",n);let i=Re(t,"packages/auth/package.json"),a=JSON.parse(await Pr(i,"utf-8"));if(!a.exports)throw new Error(`${n}: expected an exports map in packages/auth/package.json (boilerplate drift).`);lt(a.exports,"./mcp",'the "./mcp" export in packages/auth/package.json',n),await l(i,JSON.stringify(a,null,"	")+`
+`);let s=Re(t,"packages/api/package.json"),p=JSON.parse(await Pr(s,"utf-8"));if(!p.dependencies)throw new Error(`${n}: expected dependencies in packages/api/package.json (boilerplate drift).`);lt(p.dependencies,"@modelcontextprotocol/sdk","@modelcontextprotocol/sdk in packages/api dependencies",n),await l(s,JSON.stringify(p,null,"	")+`
+`);let f=Dt(e);await Nt(t,f,"companion-agent-mcp",`/${f}/companion-agent-mcp`,n,"MCP")}import{rm as W}from"fs/promises";import{join as X}from"path";import{readFile as un}from"fs/promises";import{join as Je}from"path";async function Tr(e,t){let n=Je(e,"packages/api/src/routes/internal/index.ts");await l(n,J(await un(n,"utf-8"),"internal router","companion",t)),await Lt(n);let r=Je(e,"packages/api/package.json"),o=JSON.parse(await un(r,"utf-8"));if(!o.dependencies)throw new Error(`${t}: expected dependencies in packages/api/package.json (boilerplate drift).`);lt(o.dependencies,"@repo/companion-protocol","@repo/companion-protocol in packages/api dependencies",t),await l(r,JSON.stringify(o,null,"	")+`
+`);let i=Je(e,"packages/api/src/ai/schedule-runner.ts");await l(i,J(await un(i,"utf-8"),"schedule-runner.ts","companion",t));let a=Je(e,"packages/api/src/ai/settings-store.ts");await _(a,`import { parseCompanionKey } from "../relay/companion-key";
+
+`,"","settings-store.ts relay import",t),await _(a," * - COMPANION (when `config.companion.enabled`): a well-formed companion key\n *   `<connectionId>@<deviceId>@<modelId>` is also accepted, so a default/fallback model that points\n *   at a paired CLI persists (the run path resolves it, and the daemon handles an offline device).\n *   Without this, the `@`-separated key is neither a registry key nor a `provider::modelId` key, so\n *   it would silently clear to `null` on save and vanish on reload.\n","","settings-store.ts COMPANION docstring bullet",t),await _(a," *\n * When `opts.allowCompanion` is `false`, a companion key is REJECTED even when the companion is\n * enabled - used by the builder-task surfaces, whose runs are background/cloud-only and can never\n * dispatch to a device-bound CLI.\n","","settings-store.ts opts.allowCompanion docstring paragraph",t),await _(a," * @param opts - `allowCompanion` (default `true`) controls companion-key acceptance.\n","","settings-store.ts @param opts",t),await _(a,`export function validModelKey(
+	key: string | null | undefined,
+	opts: { allowCompanion?: boolean } = {}
+): string | null {
+`,`export function validModelKey(key: string | null | undefined): string | null {
+`,"settings-store.ts validModelKey signature",t),await _(a,`	if (
+		opts.allowCompanion !== false &&
+		config.companion?.enabled === true &&
+		parseCompanionKey(key) !== null
+	) {
+		return key;
+	}
+`,"","settings-store.ts companion-key branch",t);let s=Je(e,"packages/api/src/ai/task-run.ts");await _(s,`import { parseCompanionKey } from "../relay/companion-key";
+`,"","task-run.ts relay import",t),await _(s,`/** Whether a chain link is usable for a task run: present and not a companion (device) key. */
+`,`/** Whether a chain link is usable for a task run: a present, non-empty key. */
+`,"task-run.ts usableTaskModelKey docstring",t),await _(s,`	return typeof key === "string" && key.length > 0 && parseCompanionKey(key) === null;
+`,`	return typeof key === "string" && key.length > 0;
+`,"task-run.ts usableTaskModelKey body",t),await _(s,` * override, then the builder's \`defaults.web.model\`, then the acting user's account default -
+ * skipping companion (device-bound) links, which are valid for chat but never for a background
+ * task - and delegating the final resolution to {@link resolveChatRun}, which owns BYOK/platform
+`," * override, then the builder's `defaults.web.model`, then the acting user's account default,\n * delegating the final resolution to {@link resolveChatRun}, which owns BYOK/platform\n","task-run.ts resolveTaskRun docstring model chain",t);let p=Je(e,"packages/api/src/routes/internal/ai/tasks-router.ts");await _(p,`				modelKey: validModelKey(override?.modelKey ?? null, { allowCompanion: false }),
+`,`				modelKey: validModelKey(override?.modelKey ?? null),
+`,"tasks-router.ts listTaskOverrides validModelKey",t),await _(p,`		if (typeof body.modelKey === "string" && validModelKey(body.modelKey, { allowCompanion: false }) === null) {
+`,`		if (typeof body.modelKey === "string" && validModelKey(body.modelKey) === null) {
+`,"tasks-router.ts putTask validModelKey",t)}async function mn(e){if(e.companion)return;let t=e.projectDir,n="stripCompanion";await W(X(t,"apps/companion"),{recursive:!0}),await W(X(t,"packages/companion-protocol"),{recursive:!0}),e.desktop&&e.desktopAi||await W(X(t,"packages/agent-runtime"),{recursive:!0}),await W(X(t,"packages/api/src/relay"),{recursive:!0}),await W(X(t,"packages/api/tests/relay"),{recursive:!0}),await W(X(t,"packages/api/src/routes/internal/companion.ts")),await W(X(t,"packages/api/src/routes/internal/companion-transport.ts")),await W(X(t,"packages/api/src/routes/internal/companion-install.ts")),await W(X(t,"packages/api/tests/routes/companion.test.ts")),await W(X(t,"packages/api/tests/routes/companion-transport.test.ts")),await W(X(t,"packages/api/tests/routes/companion-install.test.ts")),await Tr(t,n);let r=Dt(e);await Nt(t,r,"companion",`/${r}/companion`,n,"Companions")}var Zi=new Set(["ci.yml","desktop-release.yml"]),Qi=["cli","cli:clean","demo:bench","playground:regen","playground:test","playground:test:units","playground:test:build"];async function _r(e){let t=h(e.projectDir,".github/workflows"),n=await fn(t).catch(()=>[]);for(let r of n)Zi.has(r)||await w(h(t,r),{recursive:!0,force:!0})}async function Or(e){let t=h(e.projectDir,"package.json"),n=await j(t,"utf-8"),r=JSON.parse(n),o=!1;if(r.scripts){for(let i of Qi)i in r.scripts&&(delete r.scripts[i],o=!0);if(!vt(e))for(let i of["infra","infra:stop"])i in r.scripts&&(delete r.scripts[i],o=!0)}o&&await l(t,JSON.stringify(r,null,"	")+`
+`)}async function xr(e){let t=h(e.projectDir,"package.json"),n=await j(t,"utf-8"),r=JSON.parse(n);!r.scripts||!("dev"in r.scripts)||(r.scripts.dev=e.architecture==="separate"?"turbo run dev --continue":"turbo run dev --continue --filter=!backend",await l(t,JSON.stringify(r,null,"	")+`
+`))}async function Cr(e){let t=e.frontend==="nextjs"?"apps/web-nuxt":"apps/web-next";await w(h(e.projectDir,t),{recursive:!0,force:!0})}async function Dr(e){e.docs||await w(h(e.projectDir,"apps/docs"),{recursive:!0})}async function Nr(e){let t=e.frontend==="nextjs"?"docs/nuxt":"docs/next";if(await w(h(e.projectDir,t),{recursive:!0,force:!0}),await w(h(e.projectDir,"docs/index.mdx")),!e.desktop)await w(h(e.projectDir,"docs/desktop"),{recursive:!0,force:!0});else if(!e.desktopAi){await w(h(e.projectDir,"docs/desktop/ai"),{recursive:!0,force:!0});let n=h(e.projectDir,"docs/desktop/meta.json"),r=JSON.parse(await j(n,"utf-8"));r.pages=r.pages.filter(o=>o!=="ai"),await l(n,`${JSON.stringify(r,null,2)}
+`)}}async function Lr(e){if(e.desktop)return;await w(h(e.projectDir,"apps/desktop"),{recursive:!0});let t=h(e.projectDir,"packages/i18n/translations");for(let n of await fn(t,{withFileTypes:!0}))n.isDirectory()&&await w(h(t,n.name,"desktop.json"),{force:!0});await w(h(e.projectDir,".github/workflows/desktop-release.yml"))}var Rr=`
 # Local-embedding model binaries are fetched on install/build (see
 # scripts/fetch-embedding-model.mjs), never committed.
 resources/models/
-`;function Ti(e){if(!e.includes(Zr))throw new Error("stripDesktopAi: expected the resources/models .gitignore block in apps/desktop/.gitignore, but it was missing (boilerplate drift).");return e.replace(Zr,`
-`)}function D(e,t,r,n){let o=e.indexOf(t);if(o===-1)throw new Error(`stripDesktopAi: expected to find the ${n} seam, but it was missing (boilerplate drift).`);if(e.indexOf(t,o+t.length)!==-1)throw new Error(`stripDesktopAi: the ${n} seam appears more than once (boilerplate drift).`);return e.slice(0,o)+r+e.slice(o+t.length)}var Qr=/^[ \t]*(?:\/\/|\{\/\*) gsaas:ai-start(?: \*\/\})?[ \t]*\r?\n[\s\S]*?^[ \t]*(?:\/\/|\{\/\*) gsaas:ai-end(?: \*\/\})?[ \t]*\r?\n/gm;function Ge(e,t){if(e.match(Qr)===null)throw new Error(`stripDesktopAi: expected gsaas AI markers in ${t}, but found none (boilerplate drift).`);let r=e.replace(Qr,"");if(r.includes("gsaas:ai-start")||r.includes("gsaas:ai-end"))throw new Error(`stripDesktopAi: an unbalanced gsaas AI marker is left in ${t} (boilerplate drift).`);return r.replace(/\n{3,}/g,`
-
-`)}async function an(e){if(!e.desktop||e.desktopAi)return;let t=e.projectDir;await S(g(t,"apps/desktop/src/main/ai"),{recursive:!0}),await S(g(t,"apps/desktop/resources/ai-skills"),{recursive:!0}),await S(g(t,"apps/desktop/resources/knowledge"),{recursive:!0}),await S(g(t,"apps/desktop/scripts/fetch-embedding-model.mjs")),await S(g(t,"apps/desktop/resources/models"),{recursive:!0,force:!0}),await S(g(t,"apps/desktop/src/renderer/src/screens/agents"),{recursive:!0}),await S(g(t,"apps/desktop/src/renderer/src/screens/integrations"),{recursive:!0}),await S(g(t,"apps/desktop/src/renderer/src/lib/ai.ts")),await S(g(t,"apps/desktop/src/renderer/src/hooks/use-ai.ts")),await S(g(t,"apps/desktop/src/renderer/src/hooks/use-ai-scope.ts")),await S(g(t,"apps/desktop/src/renderer/src/screens/schedules.tsx")),await S(g(t,"apps/desktop/src/renderer/src/components/side-panel-dock.tsx")),await S(g(t,"apps/desktop/src/renderer/src/components/side-panel.tsx")),await S(g(t,"apps/desktop/src/renderer/src/config/side-panels.tsx")),await S(g(t,"apps/desktop/src/renderer/src/lib/side-panel-state.ts")),await S(g(t,"apps/desktop/tests/renderer/lib/side-panel-state.test.ts")),await S(g(t,"apps/desktop/src/renderer/src/lib/chat-prefs.ts")),await S(g(t,"apps/desktop/tests/renderer/lib/chat-prefs.test.ts")),await S(g(t,"apps/desktop/tests/main/ai"),{recursive:!0}),await S(g(t,"apps/desktop/tests/main/ai-import-boundary.test.ts")),await S(g(t,"apps/desktop/tests/renderer/lib/ai.test.ts"));let r=g(t,"apps/desktop/package.json"),n=JSON.parse(await j(r,"utf-8")),o=["@repo/ai","@anthropic-ai/claude-agent-sdk","@openai/codex-sdk","@modelcontextprotocol/sdk","cross-spawn","@huggingface/transformers","@orama/orama"];for(let p of o){if(!n.dependencies||!(p in n.dependencies))throw new Error(`stripDesktopAi: expected ${p} in apps/desktop dependencies (boilerplate drift).`);delete n.dependencies[p]}for(let p of["fetch:model","predev","prebuild"]){if(!n.scripts||!(p in n.scripts))throw new Error(`stripDesktopAi: expected the ${p} script in apps/desktop package.json (boilerplate drift).`);delete n.scripts[p]}await c(r,JSON.stringify(n,null,"	")+`
-`);let i=g(t,"apps/desktop/.gitignore"),s=await j(i,"utf-8");await c(i,Ti(s)),await Ri(t);let a=g(t,"packages/i18n/translations");for(let p of await Yt(a,{withFileTypes:!0})){if(!p.isDirectory())continue;let f=g(a,p.name,"desktop.json"),m=await j(f,"utf-8").catch(()=>null);if(m===null)continue;let u=JSON.parse(m),v=!1;"agents"in u&&(delete u.agents,v=!0),"schedules"in u&&(delete u.schedules,v=!0),"integrations"in u&&(delete u.integrations,v=!0),v&&await c(f,JSON.stringify(u,null,"	")+`
-`)}}async function Ri(e){let t=g(e,"apps/desktop/src/main/ipc.ts"),r=Ge(await j(t,"utf-8"),"main/ipc.ts");await c(t,r);let n=g(e,"apps/desktop/src/main/config.ts"),o=await j(n,"utf-8");o=D(o,`,
+`;function ea(e){if(!e.includes(Rr))throw new Error("stripDesktopAi: expected the resources/models .gitignore block in apps/desktop/.gitignore, but it was missing (boilerplate drift).");return e.replace(Rr,`
+`)}function M(e,t,n,r){let o=e.indexOf(t);if(o===-1)throw new Error(`stripDesktopAi: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(e.indexOf(t,o+t.length)!==-1)throw new Error(`stripDesktopAi: the ${r} seam appears more than once (boilerplate drift).`);return e.slice(0,o)+n+e.slice(o+t.length)}async function $r(e){if(!e.desktop||e.desktopAi)return;let t=e.projectDir;await w(h(t,"apps/desktop/src/main/ai"),{recursive:!0}),await w(h(t,"apps/desktop/resources/ai-skills"),{recursive:!0}),await w(h(t,"apps/desktop/resources/knowledge"),{recursive:!0,force:!0}),await w(h(t,"apps/desktop/scripts/fetch-embedding-model.mjs")),await w(h(t,"apps/desktop/resources/models"),{recursive:!0,force:!0}),await w(h(t,"apps/desktop/src/renderer/src/screens/agents"),{recursive:!0}),await w(h(t,"apps/desktop/src/renderer/src/screens/integrations"),{recursive:!0}),await w(h(t,"apps/desktop/src/renderer/src/screens/ai"),{recursive:!0}),await w(h(t,"apps/desktop/src/renderer/src/lib/ai.ts")),await w(h(t,"apps/desktop/src/renderer/src/hooks/use-ai.ts")),await w(h(t,"apps/desktop/src/renderer/src/hooks/use-ai-scope.ts")),await w(h(t,"apps/desktop/src/renderer/src/screens/schedules.tsx")),await w(h(t,"apps/desktop/src/renderer/src/components/side-panel-dock.tsx")),await w(h(t,"apps/desktop/src/renderer/src/components/side-panel.tsx")),await w(h(t,"apps/desktop/src/renderer/src/config/side-panels.tsx")),await w(h(t,"apps/desktop/src/renderer/src/lib/side-panel-state.ts")),await w(h(t,"apps/desktop/tests/renderer/lib/side-panel-state.test.ts")),await w(h(t,"apps/desktop/src/renderer/src/lib/chat-prefs.ts")),await w(h(t,"apps/desktop/tests/renderer/lib/chat-prefs.test.ts")),await w(h(t,"apps/desktop/src/renderer/src/lib/ai-tab-state.ts")),await w(h(t,"apps/desktop/tests/renderer/lib/ai-tab-state.test.ts")),await w(h(t,"apps/desktop/tests/main/ai"),{recursive:!0}),await w(h(t,"apps/desktop/tests/main/ai-import-boundary.test.ts")),await w(h(t,"apps/desktop/tests/renderer/lib/ai.test.ts"));let n=h(t,"apps/desktop/package.json"),r=JSON.parse(await j(n,"utf-8")),o=["@repo/ai","@repo/agent-runtime","@anthropic-ai/claude-agent-sdk","@modelcontextprotocol/sdk","cross-spawn","@huggingface/transformers","@orama/orama","@homebridge/node-pty-prebuilt-multiarch","@xterm/xterm","@xterm/addon-fit"];for(let p of o){if(!r.dependencies||!(p in r.dependencies))throw new Error(`stripDesktopAi: expected ${p} in apps/desktop dependencies (boilerplate drift).`);delete r.dependencies[p]}for(let p of["fetch:model","predev","prebuild"]){if(!r.scripts||!(p in r.scripts))throw new Error(`stripDesktopAi: expected the ${p} script in apps/desktop package.json (boilerplate drift).`);delete r.scripts[p]}await l(n,JSON.stringify(r,null,"	")+`
+`);let i=h(t,"apps/desktop/.gitignore"),a=await j(i,"utf-8");await l(i,ea(a)),await ta(t);let s=h(t,"packages/i18n/translations");for(let p of await fn(s,{withFileTypes:!0})){if(!p.isDirectory())continue;let f=h(s,p.name,"desktop.json"),m=await j(f,"utf-8").catch(()=>null);if(m===null)continue;let d=JSON.parse(m),v=!1;"agents"in d&&(delete d.agents,v=!0),"ai_hub"in d&&(delete d.ai_hub,v=!0),"schedules"in d&&(delete d.schedules,v=!0),"integrations"in d&&(delete d.integrations,v=!0),v&&await l(f,JSON.stringify(d,null,"	")+`
+`)}}async function ta(e){let t=h(e,"apps/desktop/src/main/ipc.ts"),n=J(await j(t,"utf-8"),"main/ipc.ts");await l(t,n);let r=h(e,"apps/desktop/src/main/config.ts"),o=await j(r,"utf-8");o=M(o,`,
   /** AI tool orchestration ("agents") feature flags. */
-  agents: desktopConfig.agents`,"","main/config agents field"),await c(n,o);let i=g(e,"apps/desktop/src/preload/index.ts"),s=await j(i,"utf-8");s=D(s,`import type {
+  agents: desktopConfig.agents`,"","main/config agents field"),await l(r,o);let i=h(e,"apps/desktop/src/preload/index.ts"),a=await j(i,"utf-8");a=M(a,`import type {
   AdapterCapabilities,
   AuthStatus,
   ConnectionRef,
@@ -1117,53 +1135,46 @@ resources/models/
   DetectResult,
   IntegrationInfo,
   ModelInfo,
+  ModelRef,
   PermissionDecision,
-  RunEvent,
-  RunRequest
+  RunEvent
 } from '@repo/ai/backends'
-`,"","preload @repo/ai type import"),s=D(s,`import type { ChatSession, ScheduleRun, ScheduleTrigger } from '@repo/ai/agents'
-`,"","preload @repo/ai/agents type import"),s=D(s,`import type { ReasoningEffort } from '@repo/ai/backends'
-`,"","preload ReasoningEffort type import"),s=D(s,`import type { DesktopTaskSpec } from '@repo/config/types'
-`,"","preload DesktopTaskSpec import"),s=D(s,`import type { ScheduleView } from '../main/ai/ipc'
-`,"","preload ScheduleView import");let a=/,\n[ \t]*\/\/ gsaas:ai-start\n[\s\S]*?\n[ \t]*\/\/ gsaas:ai-end\n/g,p=s.match(a);if(p===null)throw new Error("stripDesktopAi: expected the preload `ai` bridge marker region, but it was missing (boilerplate drift).");if(p.length>1)throw new Error("stripDesktopAi: the preload `ai` bridge marker region appears more than once (boilerplate drift).");s=s.replace(a,`
-`),s=Ge(s,"preload/index.ts"),await c(i,s);let f=g(e,"apps/desktop/src/renderer/src/components/shell.tsx"),m=Ge(await j(f,"utf-8"),"components/shell.tsx");await c(f,m);let u=g(e,"apps/desktop/src/renderer/src/router.tsx"),v=await j(u,"utf-8");v=D(v,`import { clientConfig } from '@/lib/config'
-`,"","router clientConfig import"),v=D(v,`import { AgentsScreen } from '@/screens/agents'
-`,"","router AgentsScreen import"),v=Ge(v,"router.tsx"),v=D(v,`  ...(clientConfig.agentsEnabled ? [agentsRoute] : []),
-`,"","router agents route spread"),v=D(v,`import { SchedulesScreen } from '@/screens/schedules'
-`,"","router SchedulesScreen import"),v=D(v,`  ...(clientConfig.agentsEnabled ? [schedulesRoute] : []),
-`,"","router schedules route spread"),v=D(v,`import { IntegrationsScreen } from '@/screens/integrations'
-`,"","router IntegrationsScreen import"),v=D(v,`  ...(clientConfig.agentsEnabled ? [integrationsRoute] : []),
-`,"","router integrations route spread"),await c(u,v);let w=g(e,"apps/desktop/src/renderer/src/config/sidebar.ts"),T=await j(w,"utf-8");T=D(T,`import {
+`,"","preload @repo/ai type import"),a=M(a,`import type { ChatSession, ScheduleRun, ScheduleTrigger } from '@repo/ai/agents'
+`,"","preload @repo/ai/agents type import"),a=M(a,`import type { ReasoningEffort } from '@repo/ai/backends'
+`,"","preload ReasoningEffort type import"),a=M(a,`import type { DesktopTaskSpec } from '@repo/config/types'
+`,"","preload DesktopTaskSpec import"),a=M(a,`import type { ScheduleView } from '../main/ai/ipc'
+`,"","preload ScheduleView import");let s=/,\n[ \t]*\/\/ gsaas:ai-start\n[\s\S]*?\n[ \t]*\/\/ gsaas:ai-end\n/g,p=a.match(s);if(p===null)throw new Error("stripDesktopAi: expected the preload `ai` bridge marker region, but it was missing (boilerplate drift).");if(p.length>1)throw new Error("stripDesktopAi: the preload `ai` bridge marker region appears more than once (boilerplate drift).");a=a.replace(s,`
+`),a=J(a,"preload/index.ts"),await l(i,a);let f=h(e,"apps/desktop/src/renderer/src/components/shell.tsx"),m=J(await j(f,"utf-8"),"components/shell.tsx");await l(f,m);let d=h(e,"apps/desktop/src/renderer/src/router.tsx"),v=await j(d,"utf-8");v=M(v,`import { clientConfig } from '@/lib/config'
+`,"","router clientConfig import"),v=M(v,`  createRouter,
+  redirect
+} from '@tanstack/react-router'`,`  createRouter
+} from '@tanstack/react-router'`,"router redirect import specifier"),v=M(v,`import { AiHubScreen } from '@/screens/ai'
+`,"","router AiHubScreen import"),v=J(v,"router.tsx"),v=M(v,`  ...(clientConfig.agentsEnabled ? [aiRoute, agentsRoute, schedulesRoute, integrationsRoute] : []),
+`,"","router ai route spread"),await l(d,v);let b=h(e,"apps/desktop/src/renderer/src/config/sidebar.ts"),I=await j(b,"utf-8");I=M(I,`import {
   BuildingsIcon,
-  ClockCountdownIcon,
   GearIcon,
   HouseIcon,
-  PlugsConnectedIcon,
   RobotIcon,
   UserCircleIcon
-} from '@phosphor-icons/react'`,"import { BuildingsIcon, GearIcon, HouseIcon, UserCircleIcon } from '@phosphor-icons/react'","sidebar icon imports"),T=Ge(T,"config/sidebar.ts"),await c(w,T);let G=g(e,"apps/desktop/src/renderer/src/lib/config.ts"),L=await j(G,"utf-8");L=D(L,`,
-  /** Whether the AI tool orchestration ("agents") feature is enabled. */
-  agentsEnabled: desktopConfig.agents.enabled,
-  /** Whether end users may author their own background schedules (default true). */
-  userSchedulesEnabled: desktopConfig.agents.userSchedules !== false`,"","lib/config agent flags"),await c(G,L);let W=g(e,"apps/desktop/src/renderer/src/lib/sidebar-flags.ts"),X=Ge(await j(W,"utf-8"),"lib/sidebar-flags.ts");await c(W,X);let ne=g(e,"apps/desktop/electron.vite.config.ts"),b=await j(ne,"utf-8");b=D(b,",\n        // The local-embeddings worker (`embeddings.ts`) spawns `embeddings-worker.js`,\n        // which must sit next to the main `index.js`. Declaring both as named rollup\n        // inputs emits `out/main/index.js` (the app entry) and\n        // `out/main/embeddings-worker.js` (the worker) as `[name].js`, so the host's\n        // `join(__dirname, 'embeddings-worker.js')` resolves in dev and packaged builds.\n        rollupOptions: {\n          // `@huggingface/transformers` loads its model runtime from `onnxruntime-node`,\n          // a native addon that resolves its `.node` binding with a dynamic\n          // `require('../bin/napi-v6/<platform>/onnxruntime_binding.node')`. A native\n          // addon cannot be Rollup-bundled, so both packages stay external and load from\n          // `node_modules` at runtime; electron-builder ships their trees (see\n          // `electron-builder.mjs` `files`/`asarUnpack`). The CLI strips this whole\n          // rollup block for an AI-off desktop build (the worker is removed with it).\n          external: ['@huggingface/transformers', 'onnxruntime-node'],\n          input: {\n            index: resolve('src/main/index.ts'),\n            'embeddings-worker': resolve('src/main/ai/embeddings-worker.ts')\n          }\n        }","","electron.vite.config rollup worker block"),await c(ne,b);let I=g(e,"apps/desktop/electron-builder.mjs"),R=await j(I,"utf-8");R=D(R,"  // The main, preload, and renderer are self-contained bundles (electron-vite with\n  // build.externalizeDeps:false), so the packaged app needs almost ZERO runtime\n  // node_modules: exclude them all by default to keep the thin client small (the\n  // backend dependency trees `@repo/api` drags in - express, pg, aws-sdk - are never\n  // `require`d at runtime once bundled). Then RE-INCLUDE only the trees the local\n  // embeddings worker keeps external (the native ONNX runtime can't be Rollup-bundled).\n  // The worker `require`s `@huggingface/transformers`, whose Node build eagerly, at\n  // import, pulls in `onnxruntime-node` (its prebuilt `.node` binding) + the shared\n  // `onnxruntime-common`, AND `sharp` (a top-level `require(\"sharp\")` in its image\n  // util that runs even for text-only embedding); `sharp` in turn needs its `@img/*`\n  // platform natives plus `detect-libc` and `semver` at load. All of these must ship\n  // or the worker import throws and semantic search silently degrades to BM25. Each\n  // glob matches against electron-builder's production-dependency collection, which\n  // flattens pnpm's `.pnpm` virtual store into the packaged `node_modules/<name>`\n  // (following symlinks) - so transitive names resolve even though, under pnpm's\n  // isolated linker, only `@huggingface/transformers` is linked at the app's own\n  // node_modules and the rest live in `.pnpm`. The CLI strips every re-include for an\n  // AI-off desktop build (there is no external runtime to collect). The\n  // `KB_SMOKE`-gated packaged-embedding test guards against this closure drifting.\n  files: [\n    'out/**',\n    'resources/**',\n    'package.json',\n    '!node_modules/**/*',\n    'node_modules/@huggingface/transformers/**/*',\n    'node_modules/onnxruntime-node/**/*',\n    'node_modules/onnxruntime-common/**/*',\n    'node_modules/sharp/**/*',\n    'node_modules/@img/**/*',\n    'node_modules/detect-libc/**/*',\n    'node_modules/semver/**/*'\n  ],",`  // The main, preload, and renderer are self-contained bundles (electron-vite with
+} from '@phosphor-icons/react'`,"import { BuildingsIcon, GearIcon, HouseIcon, UserCircleIcon } from '@phosphor-icons/react'","sidebar icon imports"),I=J(I,"config/sidebar.ts"),await l(b,I);let z=h(e,"apps/desktop/src/renderer/src/lib/config.ts"),L=await j(z,"utf-8");L=J(L,"lib/config.ts"),L=L.replace(/,(\n\} as const)/,"$1"),await l(z,L);let K=h(e,"apps/desktop/src/renderer/src/lib/sidebar-flags.ts"),ge=J(await j(K,"utf-8"),"lib/sidebar-flags.ts");await l(K,ge);let Y=h(e,"apps/desktop/electron.vite.config.ts"),k=await j(Y,"utf-8");k=M(k,",\n        // The local-embeddings worker (`embeddings.ts`) spawns `embeddings-worker.js`,\n        // which must sit next to the main `index.js`. Declaring both as named rollup\n        // inputs emits `out/main/index.js` (the app entry) and\n        // `out/main/embeddings-worker.js` (the worker) as `[name].js`, so the host's\n        // `join(__dirname, 'embeddings-worker.js')` resolves in dev and packaged builds.\n        rollupOptions: {\n          // `@huggingface/transformers` loads its model runtime from `onnxruntime-node`,\n          // a native addon that resolves its `.node` binding with a dynamic\n          // `require('../bin/napi-v6/<platform>/onnxruntime_binding.node')`. A native\n          // addon cannot be Rollup-bundled, so both packages stay external and load from\n          // `node_modules` at runtime; electron-builder ships their trees (see\n          // `electron-builder.mjs` `files`/`asarUnpack`). The embedded-terminal login flow\n          // adds `@homebridge/node-pty-prebuilt-multiarch`, also a native addon (its\n          // `pty.node` binding), kept external for the same reason. The CLI strips this whole\n          // rollup block for an AI-off desktop build (the worker is removed with it).\n          external: [\n            '@huggingface/transformers',\n            'onnxruntime-node',\n            '@homebridge/node-pty-prebuilt-multiarch'\n          ],\n          input: {\n            index: resolve('src/main/index.ts'),\n            'embeddings-worker': resolve('src/main/ai/embeddings-worker.ts')\n          }\n        }","","electron.vite.config rollup worker block"),await l(Y,k);let R=h(e,"apps/desktop/electron-builder.mjs"),P=await j(R,"utf-8");P=M(P,"  // The main, preload, and renderer are self-contained bundles (electron-vite with\n  // build.externalizeDeps:false), so the packaged app needs almost ZERO runtime\n  // node_modules: exclude them all by default to keep the thin client small (the\n  // backend dependency trees `@repo/api` drags in - express, pg, aws-sdk - are never\n  // `require`d at runtime once bundled). Then RE-INCLUDE only the trees the local\n  // embeddings worker keeps external (the native ONNX runtime can't be Rollup-bundled).\n  // The worker `require`s `@huggingface/transformers`, whose Node build eagerly, at\n  // import, pulls in `onnxruntime-node` (its prebuilt `.node` binding) + the shared\n  // `onnxruntime-common`, AND `sharp` (a top-level `require(\"sharp\")` in its image\n  // util that runs even for text-only embedding); `sharp` in turn needs its `@img/*`\n  // platform natives plus `detect-libc` and `semver` at load. All of these must ship\n  // or the worker import throws and semantic search silently degrades to BM25. Each\n  // glob matches against electron-builder's production-dependency collection, which\n  // flattens pnpm's `.pnpm` virtual store into the packaged `node_modules/<name>`\n  // (following symlinks) - so transitive names resolve even though, under pnpm's\n  // isolated linker, only `@huggingface/transformers` is linked at the app's own\n  // node_modules and the rest live in `.pnpm`. The embedded-terminal login flow adds\n  // `@homebridge/node-pty-prebuilt-multiarch` (its prebuilt `pty.node` binding); like the\n  // ONNX runtime it cannot be Rollup-bundled, so its tree is re-included here too (the\n  // `**/*.node` `asarUnpack` glob already unpacks `pty.node`). The CLI strips every\n  // re-include for an AI-off desktop build (there is no external runtime to collect). The\n  // `KB_SMOKE`-gated packaged-embedding test guards against this closure drifting.\n  files: [\n    'out/**',\n    'resources/**',\n    'package.json',\n    '!node_modules/**/*',\n    'node_modules/@huggingface/transformers/**/*',\n    'node_modules/onnxruntime-node/**/*',\n    'node_modules/onnxruntime-common/**/*',\n    'node_modules/sharp/**/*',\n    'node_modules/@img/**/*',\n    'node_modules/detect-libc/**/*',\n    'node_modules/semver/**/*',\n    'node_modules/@homebridge/node-pty-prebuilt-multiarch/**/*'\n  ],",`  // The main, preload, and renderer are self-contained bundles (electron-vite with
   // build.externalizeDeps:false), so the packaged app ships ZERO runtime node_modules
   // (every dependency is Rollup-bundled): keep only the built output, the resources,
   // and the package.json, and exclude node_modules entirely.
-  files: ['out/**', 'resources/**', 'package.json', '!node_modules/**/*'],`,"electron-builder files re-includes"),R=D(R,"'resources/**', '**/*.node'","'resources/**'","electron-builder asarUnpack entry"),await c(I,R)}async function cn(e){e.frontend==="nextjs"||e.desktop||await S(g(e.projectDir,"packages/ui-next"),{recursive:!0})}import{readFile as _i}from"fs/promises";import{join as Oi}from"path";var ln=`on:
+  files: ['out/**', 'resources/**', 'package.json', '!node_modules/**/*'],`,"electron-builder files re-includes"),P=M(P,"'resources/**', '**/*.node'","'resources/**'","electron-builder asarUnpack entry"),await l(R,P)}import{readFile as na}from"fs/promises";import{join as ra}from"path";var jr=`on:
   workflow_run:
     workflows: ["CI"]
     branches: [main]
     types: [completed]
-  workflow_dispatch:`,xi=`on:
+  workflow_dispatch:`,oa=`on:
   # Automatic release on CI success is disabled for this project to conserve
   # GitHub Actions minutes. Re-enable by uncommenting the workflow_run trigger.
   # workflow_run:
   #   workflows: ["CI"]
   #   branches: [main]
   #   types: [completed]
-  workflow_dispatch:`;async function pn(e){if(!e.desktop||e.desktopAutoRelease)return;let t=Oi(e.projectDir,".github/workflows/desktop-release.yml"),r=await _i(t,"utf8");if(!r.includes(ln))throw new Error(`Cannot make desktop releases manual: the expected workflow_run trigger block was not found in ${t}. The boilerplate workflow may have drifted.`);await c(t,r.replace(ln,xi))}import{join as Di}from"path";async function dn(e){let t=Ci(e);await c(Di(e.projectDir,".github/workflows/ci.yml"),t)}function Ci(e){let t=F[e.databaseProvider].managed,r=e.cacheProvider==="upstash",n=e.frontend==="nuxt",o=t?"":`    services:
+  workflow_dispatch:`;async function Ur(e){if(!e.desktop||e.desktopAutoRelease)return;let t=ra(e.projectDir,".github/workflows/desktop-release.yml"),n=await na(t,"utf8");if(!n.includes(jr))throw new Error(`Cannot make desktop releases manual: the expected workflow_run trigger block was not found in ${t}. The boilerplate workflow may have drifted.`);await l(t,n.replace(jr,oa))}import{join as ia}from"path";async function Mr(e){let t=aa(e);await l(ia(e.projectDir,".github/workflows/ci.yml"),t)}function aa(e){let t=G[e.databaseProvider].managed,n=e.cacheProvider==="upstash",r=e.frontend==="nuxt",o=t?"":`    services:
       postgres:
-        image: postgres:18-alpine
+        image: pgvector/pgvector:pg18
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: postgres
@@ -1175,13 +1186,13 @@ resources/models/
           --health-interval 10s
           --health-timeout 5s
           --health-retries 5
-`,i=t?"postgres://test:test@localhost:5432/saas_test":"postgres://postgres:postgres@localhost:5432/saas",s=r?`
+`,i=t?"postgres://test:test@localhost:5432/saas_test":"postgres://postgres:postgres@localhost:5432/saas",a=n?`
       UPSTASH_REDIS_REST_URL: https://test.upstash.io
-      UPSTASH_REDIS_REST_TOKEN: test-token`:"",a=(()=>{switch(e.paymentProvider){case"stripe":return`
+      UPSTASH_REDIS_REST_TOKEN: test-token`:"",s=(()=>{switch(e.paymentProvider){case"stripe":return`
       STRIPE_SECRET_KEY: test
       STRIPE_WEBHOOK_SECRET: test`;case"polar":return`
       POLAR_ACCESS_TOKEN: test
-      POLAR_WEBHOOK_SECRET: test`;case"none":return"";default:{let u=e.paymentProvider;throw new Error(`buildCiYaml: unhandled payment provider "${String(u)}"`)}}})(),p=e.socialProviders.map(u=>oe[u].envVars.map(v=>`
+      POLAR_WEBHOOK_SECRET: test`;case"none":return"";default:{let d=e.paymentProvider;throw new Error(`buildCiYaml: unhandled payment provider "${String(d)}"`)}}})(),p=e.socialProviders.map(d=>se[d].envVars.map(v=>`
       ${v.name}: test`).join("")).join("");return`# Deployment is handled by the hosting platform (Vercel, Coolify, etc.)
 # which auto-deploys on push. CI runs in parallel as a quality gate.
 # For PR-based workflows, enable GitHub branch protection to require CI before merging.
@@ -1207,7 +1218,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
 ${o}    env:
-      CONTENT_API_KEY: test-contentapi-key-16chars${s}${a}${p}
+      CONTENT_API_KEY: test-contentapi-key-16chars${a}${s}${p}
       STORAGE_REGION: test
       STORAGE_ENDPOINT: http://test
       STORAGE_ACCESS_KEY_ID: test
@@ -1220,7 +1231,7 @@ ${o}    env:
 
       - run: pnpm lint
 
-${n?`      # vue-tsc on web-nuxt OOMs on the GitHub runner's default heap once
+${r?`      # vue-tsc on web-nuxt OOMs on the GitHub runner's default heap once
       # the type graph (Nuxt + Pinia + vue-i18n + content collections)
       # crosses a threshold. Bump to 6 GB; ubuntu-latest has ~7 GB RAM.
       - run: pnpm check-types
@@ -1231,46 +1242,46 @@ ${n?`      # vue-tsc on web-nuxt OOMs on the GitHub runner's default heap once
         run: echo "DATABASE_URL=${i}" > .env
 
       - run: pnpm test
-`}import{readFile as un}from"fs/promises";import{existsSync as Ni}from"fs";import{join as qt}from"path";var mn="@repo/database";function Li(e){return e?"pnpm -F @repo/database reset && pnpm -F @repo/database push --force":"pnpm -F @repo/database migrate"}function $i(e,t){switch(e){case"fullstack":return t==="nextjs"?"web-next":"web-nuxt";case"separate":return"backend";default:{let r=e;throw new Error(`schemaOwnerApp: unhandled architecture "${String(r)}"`)}}}async function ji(e,t,r){let n=await un(e,"utf-8"),o=JSON.parse(n),i=o.scripts?.[t];if(!i)throw new Error(`Cannot prepend to missing script "${t}" in ${e}`);i.includes(mn)||(o.scripts={...o.scripts,[t]:`${r} && ${i}`},await c(e,JSON.stringify(o,null,"	")+`
-`))}async function Ui(e,t){let r=Ni(e)?JSON.parse(await un(e,"utf-8")):{$schema:"https://openapi.vercel.sh/vercel.json"},n=r.buildCommand?.trim()||"pnpm build";n.includes(mn)||(r.buildCommand=`${t} && ${n}`,await c(e,JSON.stringify(r,null,"	")+`
-`))}async function fn(e){let t=Li(e.demo===!0),r=$i(e.architecture,e.frontend),n=qt(e.projectDir,"apps",r);switch(e.deploymentTarget){case"node":await ji(qt(n,"package.json"),"start",t);return;case"vercel":await Ui(qt(n,"vercel.json"),t);return;default:{let o=e.deploymentTarget;throw new Error(`generateDeployScripts: unhandled deployment target "${String(o)}"`)}}}import{readFile as Mi}from"fs/promises";import{existsSync as Vi}from"fs";import{join as At}from"path";var Fi=["stripe","polar"];async function gn(e){let t=At(e.projectDir,"packages/payments/src"),r=e.paymentProvider,n=`// Active payment provider. To switch, change the path below to
+`}import{readFile as Vr}from"fs/promises";import{existsSync as sa}from"fs";import{join as gn}from"path";var Fr="@repo/database";function ca(e){return e?"pnpm -F @repo/database reset && pnpm -F @repo/database run deploy -- --push":"pnpm -F @repo/database run deploy"}function la(e,t){switch(e){case"fullstack":return t==="nextjs"?"web-next":"web-nuxt";case"separate":return"backend";default:{let n=e;throw new Error(`schemaOwnerApp: unhandled architecture "${String(n)}"`)}}}async function pa(e,t,n){let r=await Vr(e,"utf-8"),o=JSON.parse(r),i=o.scripts?.[t];if(!i)throw new Error(`Cannot prepend to missing script "${t}" in ${e}`);i.includes(Fr)||(o.scripts={...o.scripts,[t]:`${n} && ${i}`},await l(e,JSON.stringify(o,null,"	")+`
+`))}async function da(e,t){let n=sa(e)?JSON.parse(await Vr(e,"utf-8")):{$schema:"https://openapi.vercel.sh/vercel.json"},r=n.buildCommand?.trim()||"pnpm build";r.includes(Fr)||(n.buildCommand=`${t} && ${r}`,await l(e,JSON.stringify(n,null,"	")+`
+`))}async function Br(e){let t=ca(e.demo===!0),n=la(e.architecture,e.frontend),r=gn(e.projectDir,"apps",n);switch(e.deploymentTarget){case"node":await pa(gn(r,"package.json"),"start",t);return;case"vercel":await da(gn(r,"vercel.json"),t);return;default:{let o=e.deploymentTarget;throw new Error(`generateDeployScripts: unhandled deployment target "${String(o)}"`)}}}import{readFile as ua}from"fs/promises";import{existsSync as ma}from"fs";import{join as $t}from"path";var fa=["stripe","polar"];async function Kr(e){let t=$t(e.projectDir,"packages/payments/src"),n=e.paymentProvider,r=`// Active payment provider. To switch, change the path below to
 // "./polar/index" or "./none/index" (other folders are kept in place).
-export { ops } from "./${r}/index";
-`;await c(At(t,"providers/index.ts"),n),await c(At(t,"index.ts"),await Bi(t,r))}async function Bi(e,t){let r=At(e,"index.ts");if(!Vi(r))throw new Error(`generatePaymentBarrel: expected ${r} to exist - did packages/payments move?`);let n=await Mi(r,"utf-8"),o=Fi.filter(s=>s!==t);return n.split(`
-`).filter(s=>!o.some(a=>s.includes(`./providers/${a}/`))).join(`
-`)}import{readdir as Gi,readFile as Ki}from"fs/promises";import{join as hn}from"path";async function yn(e){if(e.demo)return;let t=e.appName.trim()||e.projectName,r=JSON.stringify(t).slice(1,-1),n=hn(e.projectDir,"packages/i18n/translations"),o;try{o=await Gi(n)}catch{return}for(let i of o){let s=hn(n,i,"web.json"),a;try{a=await Ki(s,"utf-8")}catch{continue}let p=a.replaceAll("GenerateSaaS",r);p!==a&&await c(s,p)}}import{readFile as zi}from"fs/promises";import{join as vn}from"path";var Hi=[".nuxt/",".nuxt",".nitro/",".nitro",".output/",".output","_locales/"],Yi=[".next/",".next",".svelte-kit/",".svelte-kit",".wrangler/",".wrangler",".dev.vars"];async function kn(e){let r=e.frontend==="nuxt"?Yi:Hi;await bn(vn(e.projectDir,".gitignore"),r),await bn(vn(e.projectDir,".dockerignore"),r)}async function bn(e,t){let r;try{r=await zi(e,"utf-8")}catch{return}let n=new Set(t),o=r.split(`
-`).filter(i=>!n.has(i.trim()));o.length!==r.split(`
-`).length&&await c(e,o.join(`
-`))}async function It(e){let t=e.projectDir;e.demo||(await wr(t),await Er(t),await Ar(t)),await Ir(t,e.aiTools),await Pr(t,e.frontend),await Rr(e),await _r(e),await Or(e),e.demo||await xr(e),await Nr(e);let r=await Lr(e);return await $r(e),await jr(e),await Ur(e),await Mr(e),await Vr(e),await Fr(e),await zr(e),await Hr(e),await Jr(e),await Xr(e),await en(e),await dn(e),await tn(e),await rn(e),await nn(e),await on(e),await sn(e),await an(e),await pn(e),await cn(e),await fn(e),await gn(e),await yn(e),await kn(e),{dockerComposeGenerated:r}}import{basename as wn,join as En,relative as Ji}from"path";import{createHash as Sn}from"crypto";import{readFile as qi}from"fs/promises";async function Pt(e){let t=await qi(e);return Sn("sha256").update(t).digest("hex")}function Jt(e){return Sn("sha256").update(e).digest("hex")}var Wi=new Set(["data",z]);function Xi(e){let t=e.split("/");for(let r of t)if(jt.has(r)||Ut.has(r)||Wi.has(r)||r.startsWith(".env")&&!r.includes("example"))return!0;return!1}function An(e,t){return{projectName:e.projectName??wn(t),appName:e.appName??e.projectName??wn(t),projectDir:t,frontend:e.frontend==="nextjs"?"nextjs":"nuxt",architecture:e.architecture??"fullstack",paymentProvider:e.paymentProvider??"none",emailProvider:e.emailProvider??"smtp",multiTenancy:e.multiTenancy??!1,billingScope:e.billingScope??"user",blog:e.blog??!1,docs:e.docs??!1,desktop:e.desktop??!1,desktopAutoRelease:e.desktopAutoRelease??!0,desktopAi:e.desktopAi??!1,revenueSharing:e.revenueSharing??!1,credits:e.credits??!1,dockerServices:e.dockerServices??[],aiTools:e.aiTools??[],socialProviders:e.socialProviders??[],defaultCurrency:e.defaultCurrency??"USD",deploymentTarget:e.deploymentTarget??"node",databaseProvider:e.databaseProvider??"postgres",cacheProvider:e.cacheProvider??"redis",version:e.version,baseUrl:e.baseUrl,credentials:{},demo:!1}}function Zi(e,t){return{version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",appName:e.appName,projectName:e.projectName,frontend:e.frontend,architecture:e.architecture,paymentProvider:e.paymentProvider,emailProvider:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,desktopAutoRelease:e.desktopAutoRelease,desktopAi:e.desktopAi,credits:e.credits,revenueSharing:e.revenueSharing,defaultCurrency:e.defaultCurrency,dockerServices:e.dockerServices,socialProviders:e.socialProviders,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,aiTools:e.aiTools,...e.baseUrl?{baseUrl:e.baseUrl}:{},...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}}}async function In(e,t){let n=(await we(e.projectDir,e.projectDir,Xi)).sort(),o=await Promise.all(n.map(async a=>[Se(Ji(e.projectDir,a)),await Pt(a)])),i=Object.fromEntries(o),s=Zi(e,t);await c(En(e.projectDir,de),JSON.stringify(s,null,"	")+`
-`),await c(En(e.projectDir,dr),JSON.stringify(i,null,"	")+`
-`)}import{relative as Qi}from"path";async function Ke(e){let r=(await we(e,e,$e)).sort(),n=await Promise.all(r.map(async o=>[Se(Qi(e,o)),await Pt(o)]));return Object.fromEntries(n)}import{copyFile as es,mkdir as ts,rm as rs}from"fs/promises";import{dirname as ns,join as Pn,relative as os}from"path";import{existsSync as is}from"fs";async function Wt(e,t){is(t)&&await rs(t,{recursive:!0,force:!0});let r=await we(e,e,$e);for(let n of r){let o=Se(os(e,n)),i=Pn(t,o);await ts(ns(i),{recursive:!0}),await es(n,i)}}async function Tn(e,t){await Wt(e,Pn(t,gt))}import{existsSync as ss}from"fs";import{readFile as Rn,readdir as as}from"fs/promises";import{join as re,dirname as cs,resolve as ls,sep as ps}from"path";import{fileURLToPath as ds}from"url";var nt={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Sp=Object.values(nt),Xt="generatesaas-update",_n=cs(ds(import.meta.url));function us(){let e=re(_n,"skill","content");return ss(e)?e:re(_n,"content")}function Zt(e){return!e||e.length===0?[]:e.map(t=>nt[t])}async function Qt(e,t,r,n){let o=Zt(n);for(let i of o){let s=re(e,i,Xt),a=re(s,"scripts"),p=re(s,"references");await bt(a),await bt(p),await c(re(s,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",i)),await c(re(p,".gitkeep"),"");for(let[f,m]of Object.entries(r)){let u=ls(a,f);u.startsWith(a+ps)&&await c(u,m)}}}async function On(e,t){let r=us(),n=await Rn(re(r,"SKILL.md"),"utf-8"),o=re(r,"scripts"),i=await as(o),s={};for(let a of i)a!==".gitkeep"&&(s[a]=await Rn(re(o,a),"utf-8"));await Qt(e,n,s,t)}import{execFile as ms,execFileSync as fs}from"child_process";import{access as xn,readFile as gs}from"fs/promises";import{join as er}from"path";import*as C from"@clack/prompts";function Ae(e){try{let t=process.platform==="win32"?"where":"which";return fs(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function Ee(e,t,r,n=3e5){return new Promise((o,i)=>{ms(e,t,{cwd:r,timeout:n},(s,a,p)=>{if(s){let f=String(a||"").trim(),u=[String(p||"").trim(),f].filter(Boolean).join(`
-`);i(new Error(u?`${s.message}
-${u}`:s.message))}else o()})})}async function Dn(e){if(!Ae("pnpm"))return C.log.warn("pnpm not found. Skipping lockfile regeneration."),!1;try{return await Ee("pnpm",["install","--lockfile-only","--no-frozen-lockfile","--config.minimumReleaseAge=0"],e),!0}catch(t){let r=t instanceof Error?t.message:String(t);return C.log.warn(`Lockfile regeneration failed: ${r}`),C.log.warn("Deploys using --frozen-lockfile may fail."),!1}}async function Cn(e){if(!Ae("pnpm"))return C.log.warn("pnpm not found. Skipping dependency installation."),C.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=C.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await Ee("pnpm",["install","--config.minimumReleaseAge=0"],e),t.stop("Dependencies installed."),!0}catch(r){t.stop("Dependency installation failed.");let n=r instanceof Error?r.message:String(r);return C.log.warn(`pnpm install failed: ${n}`),C.log.warn("You can run it manually later."),!1}}async function Nn(e){if(!Ae("pnpm"))return!1;let t=C.spinner();t.start("Generating baseline database migration...");try{return await Ee("pnpm",["-F","@repo/database","generate"],e),t.stop("Baseline migration generated."),!0}catch(r){t.stop("Baseline migration generation failed.");let n=r instanceof Error?r.message:String(r);return C.log.warn(`Could not generate baseline migration: ${n}`),C.log.warn("Run 'pnpm -F @repo/database generate' before your first deploy."),!1}}async function Ln(e){try{return await xn(er(e,".git")),C.log.info("Git repository already exists, skipping init."),!0}catch{}if(!Ae("git"))return C.log.warn("git not found. Skipping repository initialization."),!1;let t=C.spinner();t.start("Initializing git repository...");try{return await Ee("git",["init"],e),await Ee("git",["add","-A"],e),await Ee("git",["commit","--no-verify","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),C.log.warn("You can run git init manually later."),!1}}async function $n(e){if(!Ae("pnpm"))return!1;try{await xn(er(e,".git"))}catch{return!1}try{let t=JSON.parse(await gs(er(e,"package.json"),"utf-8")),r=!!t.devDependencies?.["simple-git-hooks"],n=!!t["simple-git-hooks"];if(!r||!n)return!1}catch{return!1}try{return await Ee("pnpm",["exec","simple-git-hooks"],e),!0}catch{return C.log.warn("Could not install git hooks. Run 'pnpm exec simple-git-hooks' manually."),!1}}import*as ze from"@clack/prompts";import H from"picocolors";function jn(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&ze.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let r=[];if(r.push(`cd ${e.projectDir}`),t.pnpmInstalled||r.push("pnpm install"),t.dockerComposeGenerated){let i=e.dockerServices.map(s=>Te[s].label).join(", ");r.push(`pnpm infra         ${H.dim(`# ${i}`)}`)}if(r.push(`pnpm dev           ${H.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(r.push(""),r.push(H.dim("Fill in remaining TODO values in .env"))),ze.note(r.join(`
-`),H.yellow("Start Development")),t.dockerComposeGenerated){let i=[];i.push(`App          ${H.cyan("http://localhost:3000")}`),e.architecture==="separate"&&i.push(`API          ${H.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&i.push(`Mailpit      ${H.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&i.push(`Inngest      ${H.cyan("http://localhost:8288")}`),ze.note(i.join(`
-`),H.yellow("Dev Tools"))}let n=[],o=hs(e);o.length>0&&n.push(`Set in production: ${H.dim(o.join(", "))}`),n.push("pnpm db:push       # Run database migrations"),n.push(ys(e)),ze.note(n.join(`
-`),H.yellow("Deployment"))}function hs(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function ys(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy       # Deploy to Vercel"}}function Un(e){let t={};if(e.name!==void 0){if(!mt(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!ve.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${ve.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org===!1)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.desktop!==void 0&&(t.desktop=e.desktop),e.desktopAuto!==void 0&&(t.desktopAutoRelease=e.desktopAuto),e.desktopAi!==void 0){if(e.desktopAi===!0&&e.desktop!==!0)throw new Error("--desktop-ai requires --desktop to be enabled.");t.desktopAi=e.desktopAi}if(e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=tr(e.docker,xe,"docker service")),e.aiTools!==void 0&&(t.aiTools=tr(e.aiTools,De,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=tr(e.socialProviders,Ne,"social provider")),e.currency!==void 0){if(!ie.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${ie.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!se.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${se.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!ae.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${ae.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!ce.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${ce.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let r=e.baseUrl.trim();if(r==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let n;try{n=new URL(r)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${n.protocol}//${n.host}`}return t}var ge={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,desktop:!1,desktopAutoRelease:!1,desktopAi:!1,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function Mn(e){let t=e.projectName??ge.projectName,r=e.projectDir??`./${t}`,n=e.appName??ut(t),o=e.deploymentTarget??ge.deploymentTarget,i=Q[o]?.edgeRuntime??!1,s=e.databaseProvider??(i?"neon":ge.databaseProvider),a=e.cacheProvider??(i?"upstash":ge.cacheProvider),p=e.emailProvider??(i?"resend":ge.emailProvider),f=e.dockerServices??(i?ge.dockerServices.filter(u=>u!=="postgres"&&u!=="redis"):ge.dockerServices),m={...ge,...e,projectName:t,appName:n,projectDir:r,deploymentTarget:o,databaseProvider:s,cacheProvider:a,emailProvider:p,dockerServices:f};m.paymentProvider==="none"&&(m.credits=!1);for(let u of Xe){if(m.deploymentTarget!==u.target)continue;let v=m.databaseProvider===u.provider?"database":"cache";if(m.databaseProvider===u.provider||m.cacheProvider===u.provider)throw new Error(`Incompatible: --deploy ${u.target} + --${v} ${u.provider}. ${u.reason}`)}for(let u of Ze)if(m.architecture===u.architecture&&m.deploymentTarget===u.target)throw new Error(`Incompatible: --architecture ${u.architecture} + --deploy ${u.target}. ${u.reason}`);return m}function tr(e,t,r){if(e.trim()==="")return[];let n=e.split(",").map(i=>i.trim()).filter(Boolean),o=n.filter(i=>!t.includes(i));if(o.length>0)throw new Error(`Invalid ${r}(s): ${o.join(", ")}. Valid values: ${t.join(", ")}`);return n}import Es from"picocolors";var As="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";async function Is(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(`generatesaas-demo:${e}`)),r=[...new Uint8Array(t).subarray(0,16)].map(n=>n.toString(16).padStart(2,"0")).join("");return`${r.slice(0,8)}-${r.slice(8,12)}-${r.slice(12,16)}-${r.slice(16,20)}-${r.slice(20,32)}`}function Ps(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function Vn(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new Y("--frontend <type>","frontend framework").choices([...ve])).addOption(new Y("--architecture <type>","fullstack or separate").choices([...Re])).addOption(new Y("--payment <provider>","payment provider").choices([..._e])).addOption(new Y("--email <provider>","email provider").choices([...Oe])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new Y("--billing-scope <scope>","billing scope (requires --org)").choices([...Ce])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--desktop","include the Electron desktop app (apps/desktop)").option("--no-desktop","exclude the Electron desktop app").option("--desktop-auto","auto-trigger the desktop release workflow on CI success (default: manual-only)").option("--no-desktop-auto","manual-only desktop releases (workflow_dispatch)").option("--desktop-ai","include the desktop AI orchestration layer (requires --desktop)").option("--no-desktop-ai","exclude the desktop AI orchestration layer").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new Y("--currency <code>","default currency for billing").choices([...ie])).addOption(new Y("--deploy <target>","deployment target").choices([...se])).addOption(new Y("--database <provider>","database provider").choices([...ae])).addOption(new Y("--cache <provider>","cache provider").choices([...ce])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new Y("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new Y("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,r)=>{await Ts(t?{...r,apiKey:t}:r)})}async function Ts(e){let t=performance.now();ar("1.19.2");let r,n;try{r=Un(e),n=Ps(e.templateVersion)}catch(b){E.cancel(x(b)),process.exit(1)}let o=E.spinner(),i;try{i=await Le({apiKey:e.apiKey,prompt:!e.yes})}catch(b){E.cancel(x(b)),process.exit(1)}e.demo&&Jt(i)!==As&&(E.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let s=pe(i),a=async()=>{let b=await fe(s),I=b.latest,R=n??I;if(n&&!b.versions.some(K=>K.version===R))throw new Error(`Template version "${n}" is not available.`);return{latestVersion:I,selectedVersion:R,desktopAllowed:b.entitlements?.desktopAllowed??!0}};o.start("Verifying access...");let p,f,m=!0;try{({latestVersion:p,selectedVersion:f,desktopAllowed:m}=await a()),o.stop("Access verified."),ke(i)}catch(b){if(o.stop("Access verification failed."),b instanceof $&&b.status===401){e.yes&&(E.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),E.log.warning("Invalid API key."),i=await tt(),s=pe(i),o.start("Verifying access...");try{({latestVersion:p,selectedVersion:f,desktopAllowed:m}=await a()),o.stop("Access verified."),ke(i)}catch(I){o.stop("Access verification failed."),E.cancel(I instanceof $&&I.status===401?"Invalid API key.":x(I)),process.exit(1)}}else E.cancel(x(b)),process.exit(1)}E.log.success(`Latest version: ${p}`),f!==p&&E.log.success(`Using template version: ${f}`),r.desktop===!0&&!m&&(E.cancel("The desktop app is available on the Pro plan and up. Upgrade your plan at generatesaas.com."),process.exit(1));let u;e.yes?u=Mn(m?r:{...r,desktop:!1}):u=await pr(r,{desktopAllowed:m});let v;o.start("Activating license...");try{let b=e.demo&&u.baseUrl?await Is(u.baseUrl):crypto.randomUUID(),I=()=>({frontend:u.frontend,version:f,installId:b,projectName:u.projectName,options:gr(u)}),R;try{R=await Lt(s,I())}catch(K){let A=ht(K);if(!A?.lastAllowedVersion)throw K;o.stop("License activation failed."),e.yes&&(E.cancel(`${A.message} Re-run with --template-version ${A.lastAllowedVersion}.`),process.exit(1));let Z=await E.confirm({message:`Your update window has ended. Continue with v${A.lastAllowedVersion} (the last version your license covers)?`});(E.isCancel(Z)||!Z)&&(E.cancel("Setup cancelled."),process.exit(0)),f=A.lastAllowedVersion,o.start(`Activating license for v${f}...`),R=await Lt(s,I())}v={token:R.token,keyHash:Jt(i),installId:R.installId??b},o.stop("License activated.")}catch(b){o.stop("License activation failed."),E.cancel(x(b)),process.exit(1)}let w=ws(u.projectDir);if(vs(w)&&bs(w).length>0)if(e.yes)E.log.info(`Directory ${w} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let I=await E.select({message:`Directory ${w} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(E.isCancel(I)||I==="cancel")&&(E.cancel("Setup cancelled."),process.exit(0)),I==="overwrite"&&ks(w,{recursive:!0,force:!0})}let T={...u,projectDir:w,version:f,...e.demo?{docs:!1}:{}};o.start("Downloading template...");try{await yt(s,f,w),o.stop("Template downloaded.")}catch(b){o.stop("Download failed."),E.cancel(x(b)),process.exit(1)}let G;o.start("Generating project files...");try{if({dockerComposeGenerated:G}=await It(T),!e.demo){let b=await Ke(w);await c(Ss(w,ft),JSON.stringify(b,null,"	")+`
-`),await Tn(w,w)}await On(w,T.aiTools),await In(T,v),o.stop("Project files generated.")}catch(b){o.stop("Generation failed."),E.cancel(x(b)),process.exit(1)}await Dn(w);let L=await Cn(w);L&&T.demo!==!0&&e.dbMigration!==!1&&await Nn(w),await Ln(w),L&&await $n(w);let W=Ae("docker"),ne=Ct(T).map(b=>b.key).filter(b=>!T.credentials?.[b]);jn(T,{pnpmInstalled:L,dockerComposeGenerated:G,dockerAvailable:W,skippedCredentials:ne}),cr(),E.log.info(Es.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as zn}from"fs";import{readFile as Hn}from"fs/promises";import{join as ot,resolve as Cs}from"path";import*as N from"@clack/prompts";import He from"picocolors";import{mkdtemp as Rs,rm as _s}from"fs/promises";import{tmpdir as Os}from"os";import{join as xs}from"path";async function rr(e,t,r,n){let o=await Rs(xs(Os(),"generatesaas-stage-"));try{await yt(e,t,o),await It({...r,projectDir:o}),await Wt(o,n)}finally{await _s(o,{recursive:!0,force:!0})}}var Fn=[{key:"frontend",label:"Frontend framework",hint:"Nuxt (Vue) or Next.js (React).",category:"Project",kind:"enum",default:"nuxt",choices:ve,adoptable:!1,impact:"structural"},{key:"architecture",label:"Architecture",hint:"Fullstack (frontend hosts the API) or a standalone Hono backend.",category:"Infrastructure",kind:"enum",default:"fullstack",choices:Re,adoptable:!1,impact:"structural"},{key:"deploymentTarget",label:"Deployment target",hint:"Node.js / Docker or Vercel serverless.",category:"Infrastructure",kind:"enum",default:"node",choices:se,adoptable:!1,impact:"config"},{key:"databaseProvider",label:"Database provider",hint:"Self-hosted PostgreSQL, Neon, or Supabase.",category:"Infrastructure",kind:"enum",default:"postgres",choices:ae,adoptable:!1,impact:"config"},{key:"cacheProvider",label:"Cache provider",hint:"Self-hosted Redis or Upstash.",category:"Infrastructure",kind:"enum",default:"redis",choices:ce,adoptable:!1,impact:"config"},{key:"paymentProvider",label:"Payment provider",hint:"Stripe, Polar, or none.",category:"Features",kind:"enum",default:"none",choices:_e,adoptable:!1,impact:"structural"},{key:"defaultCurrency",label:"Default currency",hint:"Billing and pricing currency.",category:"Features",kind:"enum",default:"USD",choices:ie,adoptable:!1,impact:"config"},{key:"emailProvider",label:"Email provider",hint:"SMTP, Amazon SES, or Resend.",category:"Features",kind:"enum",default:"smtp",choices:Oe,adoptable:!1,impact:"config"},{key:"multiTenancy",label:"Multi-tenancy (organizations)",hint:"Adds organizations - teams, members, and shared resources.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"billingScope",label:"Billing scope",hint:"Whether subscriptions belong to a user or an organization.",category:"Features",kind:"enum",default:"user",choices:Ce,adoptable:!1,impact:"config",requires:e=>e.multiTenancy===!0,requiresLabel:"requires multi-tenancy"},{key:"blog",label:"Blog",hint:"Adds the marketing blog (content collection, list and post pages).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"docs",label:"Docs app",hint:"Adds the self-hosted Fumadocs documentation site (apps/docs).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktop",label:"Desktop app",hint:"Adds the cross-platform Electron desktop app (apps/desktop).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktopAutoRelease",label:"Desktop auto-release",hint:"Release the desktop app on every CI success (vs manual-only).",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"desktopAi",label:"Desktop AI orchestration",hint:"Adds the desktop AI agents layer (requires the desktop app).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"credits",label:"Metered credits",hint:"Adds metered usage credits on top of subscription plans.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.paymentProvider!==void 0&&e.paymentProvider!=="none",requiresLabel:"requires a payment provider"},{key:"revenueSharing",label:"Revenue sharing",hint:"Opt-in MRR leaderboard with dofollow backlinks.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"socialProviders",label:"Social login providers",hint:"Which social sign-in buttons the auth screen shows.",category:"Features",kind:"multiselect",default:[],choices:Ne,adoptable:!1,impact:"config"},{key:"dockerServices",label:"Docker services",hint:"Local services scaffolded in docker-compose.",category:"Tooling",kind:"multiselect",default:[],choices:xe,adoptable:!1,impact:"config"},{key:"aiTools",label:"AI coding tools",hint:"Which AI assistants receive the bundled skill files.",category:"Tooling",kind:"multiselect",default:[],choices:De,adoptable:!1,impact:"config"}];function Ds(e,t){return e[t]!==void 0}function Bn(e){return Fn.filter(t=>t.adoptable&&!Ds(e,t.key)&&(t.requires?t.requires(e):!0)).map(t=>({key:t.key,label:t.label,hint:t.hint,kind:t.kind,default:t.default,...t.choices?{choices:t.choices}:{},impact:t.impact,...t.requiresLabel?{requiresLabel:t.requiresLabel}:{}}))}function Gn(e){let t={};for(let r of Fn)t[r.key]=Array.isArray(r.default)?[...r.default]:r.default;return{...t,...e}}function Kn(e){let r=(e.startsWith("v")?e.slice(1):e).match(/^(\d+)\.(\d+)\.(\d+)$/);return r?[Number(r[1]),Number(r[2]),Number(r[3])]:null}function Tt(e,t){let r=Kn(e),n=Kn(t);if(!r||!n)return 0;for(let o=0;o<3;o++)if(r[o]!==n[o])return r[o]-n[o];return 0}function Yn(e){e.command("update").description("Update AI skill files and stage template updates").argument("[mode]","pass 'auto' to mark the staged update for unattended apply by your AI assistant").option("--cwd <path>","project directory (default: current directory)").action(async(t,r)=>{let n=t==="auto"?"auto":void 0,o=Cs(r.cwd??process.cwd()),i=ot(o,de),s;try{s=JSON.parse(await Hn(i,"utf-8"))}catch{N.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let a;try{a=await Le()}catch(m){N.cancel(x(m)),process.exit(1)}let p=pe(a),f=N.spinner();try{f.start("Verifying access...");let m;try{m=await fe(p)}catch(A){throw A instanceof $&&A.status===401?new Error("Your saved API key was rejected. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):A}f.stop("Access verified."),ke(a),f.start("Fetching latest skill files...");let u=await fr(p,m.latest);await Qt(o,u.skillMd,u.scripts,s.aiTools);let v=Zt(s.aiTools);if(f.stop("Skills updated."),N.log.success(`Skill files installed to ${He.cyan(v.length.toString())} locations.`),s.version===m.latest){N.log.info(`Already on the latest version (${s.version}).`);return}let w=Bn(s),T=Gn(s),G=JSON.stringify(T)!==JSON.stringify(s);if(s=T,s.licenseToken)try{let A=await hr(p,{currentToken:s.licenseToken,newVersion:m.latest});s.licenseToken=A.token,A.licenseKeyHash&&(s.licenseKeyHash=A.licenseKeyHash),await c(i,JSON.stringify(s,null,"	")+`
-`),G=!1,N.log.success("License refreshed.")}catch(A){let Z=ht(A);Z&&(N.cancel(Z.message),process.exit(1)),N.log.warn("License refresh skipped.")}G&&await c(i,JSON.stringify(s,null,"	")+`
-`);let L=An(s,o),W=ot(o,ur);f.start(`Staging v${m.latest} (shaped for your config)...`),await rr(p,m.latest,L,W),f.stop("Template staged.");let{text:X,title:ne}=await Ns(p,m,s.version);X&&N.note(X,ne);let b=ot(o,ft),I=ot(o,gt),R=!zn(I),K=!zn(b);if(R){if(f.start("Building baseline template (one-time migration)..."),await rr(p,s.version,L,I),K){let A=await Ke(I);await c(b,JSON.stringify(A,null,"	")+`
-`)}if(f.stop("Baseline template stored."),!K){let A=await Ls(b,I);A>0&&N.log.warn(`Rebuilt baseline differs from the original for ${A} file(s) (the CLI's shaping evolved since this project was scaffolded). Classification still follows the committed template-hashes.json; upstream diffs for those files may include unrelated noise.`)}}else if(K){f.start("Computing baseline template hashes...");let A=await Ke(I);await c(b,JSON.stringify(A,null,"	")+`
-`),f.stop("Baseline hashes computed.")}if(await c(ot(o,mr),JSON.stringify({currentVersion:s.version,targetVersion:m.latest,changelog:X,stagedAt:new Date().toISOString(),...w.length>0?{newOptions:w}:{},...n?{mode:n}:{}},null,"	")+`
-`),N.log.info(`Update staged: ${He.cyan(s.version)} \u2192 ${He.cyan(m.latest)}`),s.aiTools&&s.aiTools.length>0){let A=s.aiTools[0],Z=We[A].label;N.log.info(`Open your project in ${He.cyan(Z)} and ask: ${He.cyan("'update my GenerateSaaS project'")}`)}else N.log.info(`Ask your AI coding assistant to ${He.cyan("'update my GenerateSaaS project'")}.`)}catch(m){f.stop("Failed."),N.cancel(`Update failed: ${x(m)}`),process.exit(1)}})}async function Ns(e,t,r){let n=t.latest,o=t.versions.filter(s=>Tt(s.version,r)>0&&Tt(s.version,n)<=0).sort((s,a)=>Tt(s.version,a.version));if(o.length<=1)return{text:await Nt(e,n),title:`Changelog v${n}`};let i=[];for(let s of o){let a=null;try{a=await Nt(e,s.version)}catch{a=null}let p=s.date?` (${s.date.slice(0,10)})`:"",f=s.breaking?" [BREAKING]":"";i.push(`# v${s.version}${p}${f}
-
-${a??"_No changelog available for this release._"}`)}return{text:i.join(`
-
-`),title:`Changelog v${r} \u2192 v${n}`}}async function Ls(e,t){let r=JSON.parse(await Hn(e,"utf-8")),n=await Ke(t),o=0;for(let[i,s]of Object.entries(r))$e(i)||n[i]!==s&&o++;for(let i of Object.keys(n))i in r||o++;return o}import*as B from"@clack/prompts";import q from"picocolors";import{readFile as $s}from"fs/promises";import{join as js,resolve as Us}from"path";function qn(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let r=Us(t.cwd??process.cwd()),n=js(r,de),o;try{o=JSON.parse(await $s(n,"utf-8"))}catch{B.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let i=[`Version:       ${q.cyan(o.version)}`,`Frontend:      ${q.cyan(o.frontend)}`,o.deploymentTarget?`Deploy target: ${q.cyan(o.deploymentTarget)}`:null,o.databaseProvider?`Database:      ${q.cyan(o.databaseProvider)}`:null,o.cacheProvider?`Cache:         ${q.cyan(o.cacheProvider)}`:null,o.aiTools&&o.aiTools.length>0?`AI tools:      ${q.cyan(o.aiTools.join(", "))}`:null].filter(Boolean).join(`
-`);B.note(i,q.bold("Project Status"));let s=B.spinner();s.start("Checking for updates...");try{let a=await Le(),p=pe(a),m=(await fe(p)).latest;o.version===m?(s.stop("Up to date."),B.log.success(`Already on the latest version (${q.green(m)})`)):(s.stop("Update available."),B.log.warning(`Update available: ${q.yellow(o.version)} \u2192 ${q.green(m)}`),B.log.info(`Open this project in your AI coding agent and ask it to ${q.cyan("update my GenerateSaaS project")} - it fetches and applies the update for you.`))}catch(a){s.stop("Check failed."),a instanceof $&&a.status===401?B.log.warning("Invalid API key. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):B.log.warning(`Could not check for updates: ${x(a)}`)}})}import{readFile as Ms}from"fs/promises";import*as O from"@clack/prompts";import _ from"picocolors";function Vs(){return process.env.GENERATESAAS_API_KEY??et()}function Fs(e){return{verdict:e.verdict,plan:e.license?.plan??e.domainInstalls.find(t=>t.ownerPlan)?.ownerPlan??null,mismatchDomain:e.install?.domain??null,ejectedAt:e.install?.ejectedAt??e.domainInstalls.find(t=>t.ejectedAt)?.ejectedAt??null}}function Bs(e){return{verdict:e.verdict??"unknown",ejectedAt:e.ejectedAt??null}}function Gs(e){switch(e.verdict){case"licensed":return O.log.success(`${_.green("LICENSED")} - resolves to an account with an active${e.plan?` ${e.plan}`:""} license.`),!0;case"ejected":return O.log.success(`${_.green("EJECTED")} - a licensed buyer opted this install out of telemetry${e.ejectedAt?` on ${e.ejectedAt.slice(0,10)}`:""}. The site is legitimate.`),!0;case"revoked":return O.log.error(`${_.red("REVOKED")} - the owning account no longer holds a plan (refund or chargeback). This deployment is no longer licensed.`),!1;case"token_domain_mismatch":return O.log.error(`${_.red("LEAKED TOKEN")} - this license belongs to a different deployment${e.mismatchDomain?` (${_.cyan(e.mismatchDomain)})`:""}, not this site. The token was copied from a licensed project.`),!1;case"no_license_history":return O.log.error(`${_.red("NO LICENSE HISTORY")} - no license has ever been associated with this site. If it runs GenerateSaaS, treat it as unlicensed.`),!1;default:return O.log.warn(`${_.yellow("UNKNOWN")} - could not cross-reference the records right now. Try again shortly.`),!1}}async function Jn(e,t){let r=process.env.GENERATESAAS_API_URL??Qe,n=Vs();e.start("Cross-referencing license records...");try{let o=n?Fs(await yr(r,n,{lkh:t.lkh,nid:t.nid,domain:t.domain})):Bs(await $t(r,{token:t.token,domain:t.domain}));return e.stop(`${_.green("Checked")} - records cross-referenced`),Gs(o)}catch(o){return e.stop(`${_.yellow("Skipped")} - ${x(o)}`),null}}function Ks(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let r=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(r)}function nr(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function Wn(e){O.note([`License ID:    ${_.cyan(String(e.lid??"unknown"))}`,`Version:       ${_.cyan(String(e.ver??"unknown"))}`,`Init version:  ${String(e.iver??"unknown")}`,`Frontend:      ${String(e.fe??"unknown")}`,`Created:       ${nr(e.pat)}`,`Last updated:  ${nr(e.uat)}`,`Expires:       ${nr(e.exp)}`,`Install ID:    ${String(e.nid??"unknown")}`].join(`
-`),_.yellow("License Details"))}function zs(e){let r=(/^https?:\/\//i.test(e)?e:`https://${e}`).replace(/\/+$/,"");if(r.endsWith("/api"))return[`${r}/license`];try{if(new URL(r).pathname!=="/")return[`${r}/license`]}catch{return[`${r}/license`]}return[`${r}/api/license`,`${r}/license`]}async function Xn(e){let t=O.spinner(),r=null,n="no candidates";for(let s of zs(e)){t.start(`Checking ${s}...`);try{let a=await fetch(s);if(!a.ok){n=`${s} returned ${a.status}`,t.stop(`${_.yellow("Not here")} - ${n}`);continue}let p=(await a.text()).trim();if(!p||p.split(".").length!==3){n=`${s} did not return a JWT`,t.stop(`${_.yellow("Not here")} - ${n}`);continue}r=p,t.stop(`${_.green("Found")} - license endpoint responded`);break}catch(a){n=`${s}: ${x(a)}`,t.stop(`${_.yellow("Unreachable")} - ${n}`)}}if(r===null){O.log.warn(`No license endpoint found (last: ${n}). The site may be ejected, not a GenerateSaaS app, or serving its API elsewhere.`);let s=Zn(e);return s?await Jn(t,{domain:s})??!1:!1}let o;try{o=Ks(r)}catch{return O.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let s=process.env.GENERATESAAS_API_URL??Qe,a=await $t(s,{token:r});if(a.valid)t.stop(`${_.green("Valid")} - signature verified`);else return t.stop(`${_.red("Invalid")} - ${a.reason}`),!1}catch{return t.stop(`${_.yellow("Skipped")} - could not reach verification service`),O.log.warn("Signature not verified. Displaying unverified claims:"),Wn(o),!1}return Wn(o),await Jn(t,{token:r,lkh:typeof o.lkh=="string"?o.lkh:void 0,nid:typeof o.nid=="string"?o.nid:void 0,domain:Zn(e)})??!0}function Zn(e){try{return new URL(/^https?:\/\//i.test(e)?e:`https://${e}`).hostname}catch{return}}function Qn(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com or https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,r)=>{if(!t&&!r.file&&(O.cancel("Provide a URL or --file <path>."),process.exit(1)),r.file){let o=(await Ms(r.file,"utf-8")).split(`
-`).map(s=>s.trim()).filter(s=>s&&!s.startsWith("#"));o.length===0&&(O.cancel("No URLs found in file."),process.exit(1));let i=0;for(let s of o)await Xn(s)&&i++,O.log.info("");O.log.success(`${i}/${o.length} sites verified.`)}else await Xn(t)||process.exit(1)})}import{existsSync as Hs,rmSync as Ys}from"fs";import*as J from"@clack/prompts";function eo(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Hs(le)?(Ys(le),J.log.success("API key removed.")):J.log.info("No API key configured.");return}let r=et();r?J.log.info(`Current API key: ****${r.slice(-4)}`):J.log.info("No API key configured.");let n=await tt(),o=pe(n),i=J.spinner();i.start("Verifying API key...");try{await fe(o),i.stop("API key verified."),ke(n),J.log.success("API key saved.")}catch(s){i.stop("Verification failed."),s instanceof $&&s.status===401?J.cancel("Invalid API key."):J.cancel(x(s)),process.exit(1)}})}import{existsSync as Rt,rmSync as qs,readFileSync as ir,writeFileSync as to}from"fs";import{join as Ie}from"path";import*as U from"@clack/prompts";var Js=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/cron-spread.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Ws=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat";
+export { ops } from "./${n}/index";
+`;await l($t(t,"providers/index.ts"),r),await l($t(t,"index.ts"),await ga(t,n))}async function ga(e,t){let n=$t(e,"index.ts");if(!ma(n))throw new Error(`generatePaymentBarrel: expected ${n} to exist - did packages/payments move?`);let r=await ua(n,"utf-8"),o=fa.filter(a=>a!==t);return r.split(`
+`).filter(a=>!o.some(s=>a.includes(`./providers/${s}/`))).join(`
+`)}import{readdir as ha,readFile as ya}from"fs/promises";import{join as Gr}from"path";async function Hr(e){if(e.demo)return;let t=e.appName.trim()||e.projectName,n=JSON.stringify(t).slice(1,-1),r=Gr(e.projectDir,"packages/i18n/translations"),o;try{o=await ha(r)}catch{return}for(let i of o){let a=Gr(r,i,"web.json"),s;try{s=await ya(a,"utf-8")}catch{continue}let p=s.replaceAll("GenerateSaaS",n);p!==s&&await l(a,p)}}import{readFile as va}from"fs/promises";import{join as zr}from"path";var ka=[".nuxt/",".nuxt",".nitro/",".nitro",".output/",".output","_locales/"],wa=[".next/",".next",".svelte-kit/",".svelte-kit",".wrangler/",".wrangler",".dev.vars"];async function qr(e){let n=e.frontend==="nuxt"?wa:ka;await Yr(zr(e.projectDir,".gitignore"),n),await Yr(zr(e.projectDir,".dockerignore"),n)}async function Yr(e,t){let n;try{n=await va(e,"utf-8")}catch{return}let r=new Set(t),o=n.split(`
+`).filter(i=>!r.has(i.trim()));o.length!==n.split(`
+`).length&&await l(e,o.join(`
+`))}async function jt(e){let t=e.projectDir;e.demo||(await Wn(t),await Xn(t),await Zn(t)),await Qn(t,e.aiTools),await er(t,e.frontend),await nr(e),await rr(e),await or(e),e.demo||await ir(e),await cr(e);let n=await lr(e);return await pr(e),await dr(e),await ur(e),await mr(e),await fr(e),await gr(e),await kr(e),await wr(e),await Er(e),await Ir(e),await _r(e),await Mr(e),await Or(e),await xr(e),await Cr(e),await Dr(e),await Nr(e),await Lr(e),await $r(e),await Ur(e),await ln(e),await dn(e),await mn(e),await Br(e),await Kr(e),await Hr(e),await qr(e),{dockerComposeGenerated:n}}import{basename as Wr,join as Xr,relative as Sa}from"path";import{createHash as Jr}from"crypto";import{readFile as ba}from"fs/promises";async function Ut(e){let t=await ba(e);return Jr("sha256").update(t).digest("hex")}function hn(e){return Jr("sha256").update(e).digest("hex")}var Ea=new Set(["data",q]);function Aa(e){let t=e.split("/");for(let n of t)if(Xt.has(n)||Zt.has(n)||Ea.has(n)||n.startsWith(".env")&&!n.includes("example"))return!0;return!1}function Zr(e,t){return{projectName:e.projectName??Wr(t),appName:e.appName??e.projectName??Wr(t),projectDir:t,frontend:e.frontend==="nextjs"?"nextjs":"nuxt",architecture:e.architecture??"fullstack",paymentProvider:e.paymentProvider??"none",emailProvider:e.emailProvider??"smtp",multiTenancy:e.multiTenancy??!1,billingScope:e.billingScope??"user",blog:e.blog??!1,docs:e.docs??!1,desktop:e.desktop??!1,desktopAutoRelease:e.desktopAutoRelease??!0,desktopAi:e.desktopAi??!1,ai:e.ai??!1,rag:e.rag??!1,companion:e.companion??!1,mcpServer:e.mcpServer??!1,aiByok:e.aiByok??!0,revenueSharing:e.revenueSharing??!1,credits:e.credits??!1,dockerServices:e.dockerServices??[],aiTools:e.aiTools??[],socialProviders:e.socialProviders??[],defaultCurrency:e.defaultCurrency??"USD",deploymentTarget:e.deploymentTarget??"node",databaseProvider:e.databaseProvider??"postgres",cacheProvider:e.cacheProvider??"redis",version:e.version,baseUrl:e.baseUrl,credentials:{},demo:!1}}function Ia(e,t){return{version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",appName:e.appName,projectName:e.projectName,frontend:e.frontend,architecture:e.architecture,paymentProvider:e.paymentProvider,emailProvider:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,desktopAutoRelease:e.desktopAutoRelease,desktopAi:e.desktopAi,ai:e.ai,rag:e.rag,companion:e.companion,mcpServer:e.mcpServer,aiByok:e.aiByok,credits:e.credits,revenueSharing:e.revenueSharing,defaultCurrency:e.defaultCurrency,dockerServices:e.dockerServices,socialProviders:e.socialProviders,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,aiTools:e.aiTools,...e.baseUrl?{baseUrl:e.baseUrl}:{},...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}}}async function Qr(e,t){let r=(await Te(e.projectDir,e.projectDir,Aa)).sort(),o=await Promise.all(r.map(async s=>[Pe(Sa(e.projectDir,s)),await Ut(s)])),i=Object.fromEntries(o),a=Ia(e,t);await l(Xr(e.projectDir,he),JSON.stringify(a,null,"	")+`
+`),await l(Xr(e.projectDir,Mn),JSON.stringify(i,null,"	")+`
+`)}import{relative as Pa}from"path";async function We(e){let n=(await Te(e,e,Be)).sort(),r=await Promise.all(n.map(async o=>[Pe(Pa(e,o)),await Ut(o)]));return Object.fromEntries(r)}import{copyFile as Ta,mkdir as Ra,rm as _a}from"fs/promises";import{dirname as Oa,join as eo,relative as xa}from"path";import{existsSync as Ca}from"fs";async function yn(e,t){Ca(t)&&await _a(t,{recursive:!0,force:!0});let n=await Te(e,e,Be);for(let r of n){let o=Pe(xa(e,r)),i=eo(t,o);await Ra(Oa(i),{recursive:!0}),await Ta(r,i)}}async function to(e,t){await yn(e,eo(t,St))}import{existsSync as Da}from"fs";import{readFile as no,readdir as Na}from"fs/promises";import{join as ie,dirname as La,resolve as $a,sep as ja}from"path";import{fileURLToPath as Ua}from"url";var pt={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Id=Object.values(pt),vn="generatesaas-update",ro=La(Ua(import.meta.url));function Ma(){let e=ie(ro,"skill","content");return Da(e)?e:ie(ro,"content")}function kn(e){return!e||e.length===0?[]:e.map(t=>pt[t])}async function wn(e,t,n,r){let o=kn(r);for(let i of o){let a=ie(e,i,vn),s=ie(a,"scripts"),p=ie(a,"references");await Pt(s),await Pt(p),await l(ie(a,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",i)),await l(ie(p,".gitkeep"),"");for(let[f,m]of Object.entries(n)){let d=$a(s,f);d.startsWith(s+ja)&&await l(d,m)}}}async function oo(e,t){let n=Ma(),r=await no(ie(n,"SKILL.md"),"utf-8"),o=ie(n,"scripts"),i=await Na(o),a={};for(let s of i)s!==".gitkeep"&&(a[s]=await no(ie(o,s),"utf-8"));await wn(e,r,a,t)}import{execFile as Va,execFileSync as Fa}from"child_process";import{access as io,readFile as Ba}from"fs/promises";import{join as bn}from"path";import*as D from"@clack/prompts";function Oe(e){try{let t=process.platform==="win32"?"where":"which";return Fa(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function _e(e,t,n,r=3e5){return new Promise((o,i)=>{Va(e,t,{cwd:n,timeout:r,maxBuffer:50*1024*1024},(a,s,p)=>{if(a){let f=String(s||"").trim(),d=[String(p||"").trim(),f].filter(Boolean).join(`
+`);i(new Error(d?`${a.message}
+${d}`:a.message))}else o()})})}async function ao(e){if(!Oe("pnpm"))return D.log.warn("pnpm not found. Skipping lockfile regeneration."),!1;try{return await _e("pnpm",["install","--lockfile-only","--no-frozen-lockfile","--config.minimumReleaseAge=0"],e),!0}catch(t){let n=t instanceof Error?t.message:String(t);return D.log.warn(`Lockfile regeneration failed: ${n}`),D.log.warn("Deploys using --frozen-lockfile may fail."),!1}}async function so(e){if(!Oe("pnpm"))return D.log.warn("pnpm not found. Skipping dependency installation."),D.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=D.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await _e("pnpm",["install","--config.minimumReleaseAge=0"],e),t.stop("Dependencies installed."),!0}catch(n){t.stop("Dependency installation failed.");let r=n instanceof Error?n.message:String(n);return D.log.warn(`pnpm install failed: ${r}`),D.log.warn("You can run it manually later."),!1}}async function co(e){if(!Oe("pnpm"))return!1;let t=D.spinner();t.start("Generating baseline database migration...");try{return await _e("pnpm",["-F","@repo/database","generate"],e),t.stop("Baseline migration generated."),!0}catch(n){t.stop("Baseline migration generation failed.");let r=n instanceof Error?n.message:String(n);return D.log.warn(`Could not generate baseline migration: ${r}`),D.log.warn("Run 'pnpm -F @repo/database generate' before your first deploy."),!1}}async function lo(e){try{return await io(bn(e,".git")),D.log.info("Git repository already exists, skipping init."),!0}catch{}if(!Oe("git"))return D.log.warn("git not found. Skipping repository initialization."),!1;let t=D.spinner();t.start("Initializing git repository...");try{return await _e("git",["init"],e),await _e("git",["add","-A"],e),await _e("git",["commit","--no-verify","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),D.log.warn("You can run git init manually later."),!1}}async function po(e){if(!Oe("pnpm"))return!1;try{await io(bn(e,".git"))}catch{return!1}try{let t=JSON.parse(await Ba(bn(e,"package.json"),"utf-8")),n=!!t.devDependencies?.["simple-git-hooks"],r=!!t["simple-git-hooks"];if(!n||!r)return!1}catch{return!1}try{return await _e("pnpm",["exec","simple-git-hooks"],e),!0}catch{return D.log.warn("Could not install git hooks. Run 'pnpm exec simple-git-hooks' manually."),!1}}import*as Xe from"@clack/prompts";import Z from"picocolors";function uo(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&Xe.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let n=[];if(n.push(`cd ${e.projectDir}`),t.pnpmInstalled||n.push("pnpm install"),t.dockerComposeGenerated){let i=e.dockerServices.map(a=>De[a].label).join(", ");n.push(`pnpm infra         ${Z.dim(`# ${i}`)}`)}if(n.push(`pnpm dev           ${Z.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(n.push(""),n.push(Z.dim("Fill in remaining TODO values in .env"))),Xe.note(n.join(`
+`),Z.yellow("Start Development")),t.dockerComposeGenerated){let i=[];i.push(`App          ${Z.cyan("http://localhost:3000")}`),e.architecture==="separate"&&i.push(`API          ${Z.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&i.push(`Mailpit      ${Z.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&i.push(`Inngest      ${Z.cyan("http://localhost:8288")}`),Xe.note(i.join(`
+`),Z.yellow("Dev Tools"))}let r=[],o=Ka(e);o.length>0&&r.push(`Set in production: ${Z.dim(o.join(", "))}`),r.push("pnpm db:setup      # Enable pgvector + apply the database schema"),r.push(Ga(e)),Xe.note(r.join(`
+`),Z.yellow("Deployment"))}function Ka(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function Ga(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy       # Deploy to Vercel"}}import Wa from"picocolors";var Xa="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";async function Za(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(`generatesaas-demo:${e}`)),n=[...new Uint8Array(t).subarray(0,16)].map(r=>r.toString(16).padStart(2,"0")).join("");return`${n.slice(0,8)}-${n.slice(8,12)}-${n.slice(12,16)}-${n.slice(16,20)}-${n.slice(20,32)}`}function Qa(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function mo(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new Q("--frontend <type>","frontend framework").choices([...Ee])).addOption(new Q("--architecture <type>","fullstack or separate").choices([...Ne])).addOption(new Q("--payment <provider>","payment provider").choices([...Le])).addOption(new Q("--email <provider>","email provider").choices([...$e])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new Q("--billing-scope <scope>","billing scope (requires --org)").choices([...Me])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--desktop","include the Electron desktop app (apps/desktop)").option("--no-desktop","exclude the Electron desktop app").option("--desktop-auto","auto-trigger the desktop release workflow on CI success (default: manual-only)").option("--no-desktop-auto","manual-only desktop releases (workflow_dispatch)").option("--desktop-ai","include the desktop AI orchestration layer (requires --desktop)").option("--no-desktop-ai","exclude the desktop AI orchestration layer").option("--ai","include the AI features (chat, models, schedules, integrations); unlocks the companion + MCP server").option("--no-ai","exclude the AI features").option("--rag","include server-side RAG knowledge (pgvector embeddings + semantic search)").option("--no-rag","exclude server-side RAG knowledge").option("--companion","include the companion daemon (apps/companion) + its HTTP transport").option("--no-companion","exclude the companion daemon").option("--mcp-server","include the outward MCP server (the /mcp route + Better Auth mcp() provider)").option("--no-mcp-server","exclude the outward MCP server").option("--ai-byok","AI BYOK mode: end-users bring their own provider key (default)").option("--no-ai-byok","operator-keyed, credit-metered AI platform mode").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new Q("--currency <code>","default currency for billing").choices([...ce])).addOption(new Q("--deploy <target>","deployment target").choices([...le])).addOption(new Q("--database <provider>","database provider").choices([...pe])).addOption(new Q("--cache <provider>","cache provider").choices([...de])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new Q("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new Q("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,n)=>{await es(t?{...n,apiKey:t}:n)})}async function es(e){let t=performance.now();xn("1.20.0");let n,r;try{n=$n(e),r=Qa(e.templateVersion)}catch(k){A.cancel(C(k)),process.exit(1)}let o=A.spinner(),i;try{i=await Fe({apiKey:e.apiKey,prompt:!e.yes})}catch(k){A.cancel(C(k)),process.exit(1)}e.demo&&hn(i)!==Xa&&(A.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let a=fe(i),s=async()=>{let k=await ke(a),R=k.latest,P=r??R;if(r&&!k.versions.some(ae=>ae.version===P))throw new Error(`Template version "${r}" is not available.`);return{latestVersion:R,selectedVersion:P,desktopAllowed:k.entitlements?.desktopAllowed??!0}};o.start("Verifying access...");let p,f,m=!0;try{({latestVersion:p,selectedVersion:f,desktopAllowed:m}=await s()),o.stop("Access verified."),Ie(i)}catch(k){if(o.stop("Access verification failed."),k instanceof U&&k.status===401){e.yes&&(A.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),A.log.warning("Invalid API key."),i=await st(),a=fe(i),o.start("Verifying access...");try{({latestVersion:p,selectedVersion:f,desktopAllowed:m}=await s()),o.stop("Access verified."),Ie(i)}catch(R){o.stop("Access verification failed."),A.cancel(R instanceof U&&R.status===401?"Invalid API key.":C(R)),process.exit(1)}}else A.cancel(C(k)),process.exit(1)}A.log.success(`Latest version: ${p}`),f!==p&&A.log.success(`Using template version: ${f}`),n.desktop===!0&&!m&&(A.cancel("The desktop app is available on the Pro plan and up. Upgrade your plan at generatesaas.com."),process.exit(1));let d;e.yes?d=jn(m?n:{...n,desktop:!1}):d=await Un(n,{desktopAllowed:m});let v;o.start("Activating license...");try{let k=e.demo&&d.baseUrl?await Za(d.baseUrl):crypto.randomUUID(),R=()=>({frontend:d.frontend,version:f,installId:k,projectName:d.projectName,options:Kn(d)}),P;try{P=await Jt(a,R())}catch(ae){let $=Et(ae);if(!$?.lastAllowedVersion)throw ae;o.stop("License activation failed."),e.yes&&(A.cancel(`${$.message} Re-run with --template-version ${$.lastAllowedVersion}.`),process.exit(1));let T=await A.confirm({message:`Your update window has ended. Continue with v${$.lastAllowedVersion} (the last version your license covers)?`});(A.isCancel(T)||!T)&&(A.cancel("Setup cancelled."),process.exit(0)),f=$.lastAllowedVersion,o.start(`Activating license for v${f}...`),P=await Jt(a,R())}v={token:P.token,keyHash:hn(i),installId:P.installId??k},o.stop("License activated.")}catch(k){o.stop("License activation failed."),A.cancel(C(k)),process.exit(1)}let b=Ja(d.projectDir);if(Ha(b)&&za(b).length>0)if(e.yes)A.log.info(`Directory ${b} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let R=await A.select({message:`Directory ${b} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(A.isCancel(R)||R==="cancel")&&(A.cancel("Setup cancelled."),process.exit(0)),R==="overwrite"&&Ya(b,{recursive:!0,force:!0})}let I={...d,projectDir:b,version:f,...e.demo?{docs:!1}:{}};o.start("Downloading template...");try{await At(a,f,b),o.stop("Template downloaded.")}catch(k){o.stop("Download failed."),A.cancel(C(k)),process.exit(1)}let z;o.start("Generating project files...");try{if({dockerComposeGenerated:z}=await jt(I),!e.demo){let k=await We(b);await l(qa(b,bt),JSON.stringify(k,null,"	")+`
+`),await to(b,b)}await oo(b,I.aiTools),await Qr(I,v),o.stop("Project files generated.")}catch(k){o.stop("Generation failed."),A.cancel(C(k)),process.exit(1)}await ao(b);let L=await so(b);L&&I.demo!==!0&&e.dbMigration!==!1&&await co(b),await lo(b),L&&await po(b);let K=Oe("docker"),Y=Yt(I).map(k=>k.key).filter(k=>!I.credentials?.[k]);uo(I,{pnpmInstalled:L,dockerComposeGenerated:z,dockerAvailable:K,skippedCredentials:Y}),Cn(),A.log.info(Wa.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as vo}from"fs";import{readFile as ko}from"fs/promises";import{join as dt,resolve as as}from"path";import*as N from"@clack/prompts";import Ze from"picocolors";import{mkdtemp as ts,rm as ns}from"fs/promises";import{tmpdir as rs}from"os";import{join as os}from"path";async function Sn(e,t,n,r){let o=await ts(os(rs(),"generatesaas-stage-"));try{await At(e,t,o),await jt({...n,projectDir:o}),await yn(o,r)}finally{await ns(o,{recursive:!0,force:!0})}}var fo=[{key:"frontend",label:"Frontend framework",hint:"Nuxt (Vue) or Next.js (React).",category:"Project",kind:"enum",default:"nuxt",choices:Ee,adoptable:!1,impact:"structural"},{key:"architecture",label:"Architecture",hint:"Fullstack (frontend hosts the API) or a standalone Hono backend.",category:"Infrastructure",kind:"enum",default:"fullstack",choices:Ne,adoptable:!1,impact:"structural"},{key:"deploymentTarget",label:"Deployment target",hint:"Node.js / Docker or Vercel serverless.",category:"Infrastructure",kind:"enum",default:"node",choices:le,adoptable:!1,impact:"config"},{key:"databaseProvider",label:"Database provider",hint:"Self-hosted PostgreSQL, Neon, or Supabase.",category:"Infrastructure",kind:"enum",default:"postgres",choices:pe,adoptable:!1,impact:"config"},{key:"cacheProvider",label:"Cache provider",hint:"Self-hosted Redis or Upstash.",category:"Infrastructure",kind:"enum",default:"redis",choices:de,adoptable:!1,impact:"config"},{key:"paymentProvider",label:"Payment provider",hint:"Stripe, Polar, or none.",category:"Features",kind:"enum",default:"none",choices:Le,adoptable:!1,impact:"structural"},{key:"defaultCurrency",label:"Default currency",hint:"Billing and pricing currency.",category:"Features",kind:"enum",default:"USD",choices:ce,adoptable:!1,impact:"config"},{key:"emailProvider",label:"Email provider",hint:"SMTP, Amazon SES, or Resend.",category:"Features",kind:"enum",default:"smtp",choices:$e,adoptable:!1,impact:"config"},{key:"multiTenancy",label:"Multi-tenancy (organizations)",hint:"Adds organizations - teams, members, and shared resources.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"billingScope",label:"Billing scope",hint:"Whether subscriptions belong to a user or an organization.",category:"Features",kind:"enum",default:"user",choices:Me,adoptable:!1,impact:"config",requires:e=>e.multiTenancy===!0,requiresLabel:"requires multi-tenancy"},{key:"blog",label:"Blog",hint:"Adds the marketing blog (content collection, list and post pages).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"docs",label:"Docs app",hint:"Adds the self-hosted Fumadocs documentation site (apps/docs).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktop",label:"Desktop app",hint:"Adds the cross-platform Electron desktop app (apps/desktop).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktopAutoRelease",label:"Desktop auto-release",hint:"Release the desktop app on every CI success (vs manual-only).",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"desktopAi",label:"Desktop AI orchestration",hint:"Adds the desktop AI agents layer (requires the desktop app).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"ai",label:"AI features",hint:"Adds the AI surface (chat, models, schedules, integrations) and unlocks the companion, MCP server, RAG, and BYOK options. Off keeps config.ai.enabled false so the AI nav stays hidden.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"rag",label:"Server-side RAG (knowledge)",hint:"Adds pgvector knowledge with embeddings + semantic search.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"companion",label:"Companion daemon",hint:"Adds the terminal companion (apps/companion) that drives the user's subscription CLIs over stateless HTTP. Works on any deployment.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"mcpServer",label:"Outward MCP server",hint:"Exposes the app's capability layer to external agents as an authenticated MCP OAuth server.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"aiByok",label:"AI billing mode (BYOK)",hint:"BYOK: end-users bring their own provider key, no credit metering. Off: operator-keyed, credit-metered platform mode.",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"credits",label:"Metered credits",hint:"Adds metered usage credits on top of subscription plans.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.paymentProvider!==void 0&&e.paymentProvider!=="none",requiresLabel:"requires a payment provider"},{key:"revenueSharing",label:"Revenue sharing",hint:"Opt-in MRR leaderboard with dofollow backlinks.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"socialProviders",label:"Social login providers",hint:"Which social sign-in buttons the auth screen shows.",category:"Features",kind:"multiselect",default:[],choices:Ve,adoptable:!1,impact:"config"},{key:"dockerServices",label:"Docker services",hint:"Local services scaffolded in docker-compose.",category:"Tooling",kind:"multiselect",default:[],choices:je,adoptable:!1,impact:"config"},{key:"aiTools",label:"AI coding tools",hint:"Which AI assistants receive the bundled skill files.",category:"Tooling",kind:"multiselect",default:[],choices:Ue,adoptable:!1,impact:"config"}];function is(e,t){return e[t]!==void 0}function go(e){return fo.filter(t=>t.adoptable&&!is(e,t.key)&&(t.requires?t.requires(e):!0)).map(t=>({key:t.key,label:t.label,hint:t.hint,kind:t.kind,default:t.default,...t.choices?{choices:t.choices}:{},impact:t.impact,...t.requiresLabel?{requiresLabel:t.requiresLabel}:{}}))}function ho(e){let t={};for(let n of fo)t[n.key]=Array.isArray(n.default)?[...n.default]:n.default;return{...t,...e}}function yo(e){let n=(e.startsWith("v")?e.slice(1):e).match(/^(\d+)\.(\d+)\.(\d+)$/);return n?[Number(n[1]),Number(n[2]),Number(n[3])]:null}function Mt(e,t){let n=yo(e),r=yo(t);if(!n||!r)return 0;for(let o=0;o<3;o++)if(n[o]!==r[o])return n[o]-r[o];return 0}function wo(e){e.command("update").description("Update AI skill files and stage template updates").argument("[mode]","pass 'auto' to mark the staged update for unattended apply by your AI assistant").option("--cwd <path>","project directory (default: current directory)").action(async(t,n)=>{let r=t==="auto"?"auto":void 0,o=as(n.cwd??process.cwd()),i=dt(o,he),a;try{a=JSON.parse(await ko(i,"utf-8"))}catch{N.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let s;try{s=await Fe()}catch(m){N.cancel(C(m)),process.exit(1)}let p=fe(s),f=N.spinner();try{f.start("Verifying access...");let m;try{m=await ke(p)}catch(T){throw T instanceof U&&T.status===401?new Error("Your saved API key was rejected. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):T}f.stop("Access verified."),Ie(s),f.start("Fetching latest skill files...");let d=await Bn(p,m.latest);await wn(o,d.skillMd,d.scripts,a.aiTools);let v=kn(a.aiTools);if(f.stop("Skills updated."),N.log.success(`Skill files installed to ${Ze.cyan(v.length.toString())} locations.`),a.version===m.latest){N.log.info(`Already on the latest version (${a.version}).`);return}let b=JSON.stringify(a);Ln(a);let I=go(a),z=ho(a),L=JSON.stringify(z)!==b;if(a=z,a.licenseToken)try{let T=await Gn(p,{currentToken:a.licenseToken,newVersion:m.latest});a.licenseToken=T.token,T.licenseKeyHash&&(a.licenseKeyHash=T.licenseKeyHash),await l(i,JSON.stringify(a,null,"	")+`
+`),L=!1,N.log.success("License refreshed.")}catch(T){let we=Et(T);we&&(N.cancel(we.message),process.exit(1)),N.log.warn("License refresh skipped.")}L&&await l(i,JSON.stringify(a,null,"	")+`
+`);let K=Zr(a,o),ge=dt(o,Vn);f.start(`Staging v${m.latest} (shaped for your config)...`),await Sn(p,m.latest,K,ge),f.stop("Template staged.");let{text:Y,title:k}=await ss(p,m,a.version);Y&&N.note(Y,k);let R=dt(o,bt),P=dt(o,St),ae=!vo(P),$=!vo(R);if(ae){if(f.start("Building baseline template (one-time migration)..."),await Sn(p,a.version,K,P),$){let T=await We(P);await l(R,JSON.stringify(T,null,"	")+`
+`)}if(f.stop("Baseline template stored."),!$){let T=await cs(R,P);T>0&&N.log.warn(`Rebuilt baseline differs from the original for ${T} file(s) (the CLI's shaping evolved since this project was scaffolded). Classification still follows the committed template-hashes.json; upstream diffs for those files may include unrelated noise.`)}}else if($){f.start("Computing baseline template hashes...");let T=await We(P);await l(R,JSON.stringify(T,null,"	")+`
+`),f.stop("Baseline hashes computed.")}if(await l(dt(o,Fn),JSON.stringify({currentVersion:a.version,targetVersion:m.latest,changelog:Y,stagedAt:new Date().toISOString(),...I.length>0?{newOptions:I}:{},...r?{mode:r}:{}},null,"	")+`
+`),N.log.info(`Update staged: ${Ze.cyan(a.version)} \u2192 ${Ze.cyan(m.latest)}`),a.aiTools&&a.aiTools.length>0){let T=a.aiTools[0],we=nt[T].label;N.log.info(`Open your project in ${Ze.cyan(we)} and ask: ${Ze.cyan("'update my GenerateSaaS project'")}`)}else N.log.info(`Ask your AI coding assistant to ${Ze.cyan("'update my GenerateSaaS project'")}.`)}catch(m){f.stop("Failed."),N.cancel(`Update failed: ${C(m)}`),process.exit(1)}})}async function ss(e,t,n){let r=t.latest,o=t.versions.filter(a=>Mt(a.version,n)>0&&Mt(a.version,r)<=0).sort((a,s)=>Mt(a.version,s.version));if(o.length<=1)return{text:await qt(e,r),title:`Changelog v${r}`};let i=[];for(let a of o){let s=null;try{s=await qt(e,a.version)}catch{s=null}let p=a.date?` (${a.date.slice(0,10)})`:"",f=a.breaking?" [BREAKING]":"";i.push(`# v${a.version}${p}${f}
+
+${s??"_No changelog available for this release._"}`)}return{text:i.join(`
+
+`),title:`Changelog v${n} \u2192 v${r}`}}async function cs(e,t){let n=JSON.parse(await ko(e,"utf-8")),r=await We(t),o=0;for(let[i,a]of Object.entries(n))Be(i)||r[i]!==a&&o++;for(let i of Object.keys(r))i in n||o++;return o}import*as H from"@clack/prompts";import ee from"picocolors";import{readFile as ls}from"fs/promises";import{join as ps,resolve as ds}from"path";function bo(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let n=ds(t.cwd??process.cwd()),r=ps(n,he),o;try{o=JSON.parse(await ls(r,"utf-8"))}catch{H.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let i=[`Version:       ${ee.cyan(o.version)}`,`Frontend:      ${ee.cyan(o.frontend)}`,o.deploymentTarget?`Deploy target: ${ee.cyan(o.deploymentTarget)}`:null,o.databaseProvider?`Database:      ${ee.cyan(o.databaseProvider)}`:null,o.cacheProvider?`Cache:         ${ee.cyan(o.cacheProvider)}`:null,o.aiTools&&o.aiTools.length>0?`AI tools:      ${ee.cyan(o.aiTools.join(", "))}`:null].filter(Boolean).join(`
+`);H.note(i,ee.bold("Project Status"));let a=H.spinner();a.start("Checking for updates...");try{let s=await Fe(),p=fe(s),m=(await ke(p)).latest;o.version===m?(a.stop("Up to date."),H.log.success(`Already on the latest version (${ee.green(m)})`)):(a.stop("Update available."),H.log.warning(`Update available: ${ee.yellow(o.version)} \u2192 ${ee.green(m)}`),H.log.info(`Open this project in your AI coding agent and ask it to ${ee.cyan("update my GenerateSaaS project")} - it fetches and applies the update for you.`))}catch(s){a.stop("Check failed."),s instanceof U&&s.status===401?H.log.warning("Invalid API key. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):H.log.warning(`Could not check for updates: ${C(s)}`)}})}import{readFile as us}from"fs/promises";import*as x from"@clack/prompts";import O from"picocolors";function ms(){return process.env.GENERATESAAS_API_KEY??at()}function fs(e){return{verdict:e.verdict,plan:e.license?.plan??e.domainInstalls.find(t=>t.ownerPlan)?.ownerPlan??null,mismatchDomain:e.install?.domain??null,ejectedAt:e.install?.ejectedAt??e.domainInstalls.find(t=>t.ejectedAt)?.ejectedAt??null}}function gs(e){return{verdict:e.verdict??"unknown",ejectedAt:e.ejectedAt??null}}function hs(e){switch(e.verdict){case"licensed":return x.log.success(`${O.green("LICENSED")} - resolves to an account with an active${e.plan?` ${e.plan}`:""} license.`),!0;case"ejected":return x.log.success(`${O.green("EJECTED")} - a licensed buyer opted this install out of telemetry${e.ejectedAt?` on ${e.ejectedAt.slice(0,10)}`:""}. The site is legitimate.`),!0;case"revoked":return x.log.error(`${O.red("REVOKED")} - the owning account no longer holds a plan (refund or chargeback). This deployment is no longer licensed.`),!1;case"token_domain_mismatch":return x.log.error(`${O.red("LEAKED TOKEN")} - this license belongs to a different deployment${e.mismatchDomain?` (${O.cyan(e.mismatchDomain)})`:""}, not this site. The token was copied from a licensed project.`),!1;case"no_license_history":return x.log.error(`${O.red("NO LICENSE HISTORY")} - no license has ever been associated with this site. If it runs GenerateSaaS, treat it as unlicensed.`),!1;default:return x.log.warn(`${O.yellow("UNKNOWN")} - could not cross-reference the records right now. Try again shortly.`),!1}}async function So(e,t){let n=process.env.GENERATESAAS_API_URL??it,r=ms();e.start("Cross-referencing license records...");try{let o=r?fs(await Hn(n,r,{lkh:t.lkh,nid:t.nid,domain:t.domain})):gs(await Wt(n,{token:t.token,domain:t.domain}));return e.stop(`${O.green("Checked")} - records cross-referenced`),hs(o)}catch(o){return e.stop(`${O.yellow("Skipped")} - ${C(o)}`),null}}function ys(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let n=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(n)}function En(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function Eo(e){x.note([`License ID:    ${O.cyan(String(e.lid??"unknown"))}`,`Version:       ${O.cyan(String(e.ver??"unknown"))}`,`Init version:  ${String(e.iver??"unknown")}`,`Frontend:      ${String(e.fe??"unknown")}`,`Created:       ${En(e.pat)}`,`Last updated:  ${En(e.uat)}`,`Expires:       ${En(e.exp)}`,`Install ID:    ${String(e.nid??"unknown")}`].join(`
+`),O.yellow("License Details"))}function vs(e){let n=(/^https?:\/\//i.test(e)?e:`https://${e}`).replace(/\/+$/,"");if(n.endsWith("/api"))return[`${n}/license`];try{if(new URL(n).pathname!=="/")return[`${n}/license`]}catch{return[`${n}/license`]}return[`${n}/api/license`,`${n}/license`]}async function Ao(e){let t=x.spinner(),n=null,r="no candidates";for(let a of vs(e)){t.start(`Checking ${a}...`);try{let s=await fetch(a);if(!s.ok){r=`${a} returned ${s.status}`,t.stop(`${O.yellow("Not here")} - ${r}`);continue}let p=(await s.text()).trim();if(!p||p.split(".").length!==3){r=`${a} did not return a JWT`,t.stop(`${O.yellow("Not here")} - ${r}`);continue}n=p,t.stop(`${O.green("Found")} - license endpoint responded`);break}catch(s){r=`${a}: ${C(s)}`,t.stop(`${O.yellow("Unreachable")} - ${r}`)}}if(n===null){x.log.warn(`No license endpoint found (last: ${r}). The site may be ejected, not a GenerateSaaS app, or serving its API elsewhere.`);let a=Io(e);return a?await So(t,{domain:a})??!1:!1}let o;try{o=ys(n)}catch{return x.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let a=process.env.GENERATESAAS_API_URL??it,s=await Wt(a,{token:n});if(s.valid)t.stop(`${O.green("Valid")} - signature verified`);else return t.stop(`${O.red("Invalid")} - ${s.reason}`),!1}catch{return t.stop(`${O.yellow("Skipped")} - could not reach verification service`),x.log.warn("Signature not verified. Displaying unverified claims:"),Eo(o),!1}return Eo(o),await So(t,{token:n,lkh:typeof o.lkh=="string"?o.lkh:void 0,nid:typeof o.nid=="string"?o.nid:void 0,domain:Io(e)})??!0}function Io(e){try{return new URL(/^https?:\/\//i.test(e)?e:`https://${e}`).hostname}catch{return}}function Po(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com or https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,n)=>{if(!t&&!n.file&&(x.cancel("Provide a URL or --file <path>."),process.exit(1)),n.file){let o=(await us(n.file,"utf-8")).split(`
+`).map(a=>a.trim()).filter(a=>a&&!a.startsWith("#"));o.length===0&&(x.cancel("No URLs found in file."),process.exit(1));let i=0;for(let a of o)await Ao(a)&&i++,x.log.info("");x.log.success(`${i}/${o.length} sites verified.`)}else await Ao(t)||process.exit(1)})}import{existsSync as ks,rmSync as ws}from"fs";import*as te from"@clack/prompts";function To(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){ks(me)?(ws(me),te.log.success("API key removed.")):te.log.info("No API key configured.");return}let n=at();n?te.log.info(`Current API key: ****${n.slice(-4)}`):te.log.info("No API key configured.");let r=await st(),o=fe(r),i=te.spinner();i.start("Verifying API key...");try{await ke(o),i.stop("API key verified."),Ie(r),te.log.success("API key saved.")}catch(a){i.stop("Verification failed."),a instanceof U&&a.status===401?te.cancel("Invalid API key."):te.cancel(C(a)),process.exit(1)}})}import{existsSync as Vt,rmSync as bs,readFileSync as In,writeFileSync as Ro}from"fs";import{join as xe}from"path";import*as V from"@clack/prompts";var Ss=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/cron-spread.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Es=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat";
 `,`	licenseHeartbeatFunction,
 `]},{file:"packages/api/src/routes/internal/index.ts",removals:[`import licenseRoutes from "./license";
 `,`	.route("/license", licenseRoutes)
-`]}];function Xs(e){return(e&&e.length>0?e.map(r=>nt[r]):Object.values(nt)).map(r=>Ie(r,Xt))}function or(e){return Rt(e)?(qs(e,{recursive:!0}),!0):!1}function Zs(e,t){if(!Rt(e))return!1;let r=ir(e,"utf-8"),n=r;for(let o of t)n=n.replace(o,"");return n===r?!1:(to(e,n,"utf-8"),!0)}function Qs(e){let t=Ie(e,".gitignore");if(!Rt(t))return!1;let r=ir(t,"utf-8"),n=r.split(`
+`]}];function As(e){return(e&&e.length>0?e.map(n=>pt[n]):Object.values(pt)).map(n=>xe(n,vn))}function An(e){return Vt(e)?(bs(e,{recursive:!0}),!0):!1}function Is(e,t){if(!Vt(e))return!1;let n=In(e,"utf-8"),r=n;for(let o of t)r=r.replace(o,"");return r===n?!1:(Ro(e,r,"utf-8"),!0)}function Ps(e){let t=xe(e,".gitignore");if(!Vt(t))return!1;let n=In(t,"utf-8"),r=n.split(`
 `).filter(o=>!o.includes(".generatesaas")).join(`
-`);return n===r?!1:(to(t,n,"utf-8"),!0)}function ro(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),r=Ie(t,de),n;try{n=JSON.parse(ir(r,"utf-8"))}catch{U.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let o=await U.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(U.isCancel(o)&&(U.cancel("Eject cancelled."),process.exit(0)),n.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${n.licenseToken}`},body:JSON.stringify({event:"eject",version:n.version,frontend:n.frontend}),signal:AbortSignal.timeout(5e3)}),U.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{U.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let i=[],s=[];for(let a of Xs(n.aiTools))or(Ie(t,a))&&i.push(a);for(let a of Js)or(Ie(t,a))&&i.push(a);or(Ie(t,z))&&i.push(z+"/");for(let a of Ws){let p=Ie(t,a.file);Zs(p,a.removals)?s.push(a.file):Rt(p)&&U.log.warn(`Could not auto-modify ${a.file} - manually remove license/heartbeat references.`)}Qs(t)&&s.push(".gitignore");for(let a of i)U.log.info(`Deleted ${a}`);for(let a of s)U.log.info(`Modified ${a}`);U.log.success("Ejected successfully. This project is now fully standalone.")})}var Pe=new ea().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.19.2").addHelpText("after",`
+`);return r===n?!1:(Ro(t,r,"utf-8"),!0)}function _o(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),n=xe(t,he),r;try{r=JSON.parse(In(n,"utf-8"))}catch{V.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let o=await V.text({message:'Type "eject" to confirm (this cannot be undone):',validate:s=>{if(s!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(V.isCancel(o)&&(V.cancel("Eject cancelled."),process.exit(0)),r.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r.licenseToken}`},body:JSON.stringify({event:"eject",version:r.version,frontend:r.frontend}),signal:AbortSignal.timeout(5e3)}),V.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{V.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let i=[],a=[];for(let s of As(r.aiTools))An(xe(t,s))&&i.push(s);for(let s of Ss)An(xe(t,s))&&i.push(s);An(xe(t,q))&&i.push(q+"/");for(let s of Es){let p=xe(t,s.file);Is(p,s.removals)?a.push(s.file):Vt(p)&&V.log.warn(`Could not auto-modify ${s.file} - manually remove license/heartbeat references.`)}Ps(t)&&a.push(".gitignore");for(let s of i)V.log.info(`Deleted ${s}`);for(let s of a)V.log.info(`Modified ${s}`);V.log.success("Ejected successfully. This project is now fully standalone.")})}var Ce=new Ts().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.20.0").addHelpText("after",`
 Examples:
   $ generatesaas init                  Interactive setup
   $ generatesaas init -n my-app -y     Quick setup with defaults
   $ generatesaas status                Check for updates
   $ generatesaas auth                  Set or update API key
-`);Vn(Pe);Yn(Pe);qn(Pe);Qn(Pe);eo(Pe);ro(Pe);Pe.parseAsync().catch(e=>{no.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});
+`);mo(Ce);wo(Ce);bo(Ce);Po(Ce);To(Ce);_o(Ce);Ce.parseAsync().catch(e=>{Oo.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});