generatesaas 1.20.0 → 1.21.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/index.js +366 -214
  2. package/package.json +1 -1
package/dist/index.js CHANGED
@@ -1,15 +1,15 @@
1
1
  #!/usr/bin/env node
2
- import{Command as Ts}from"commander";import*as Oo from"@clack/prompts";import{existsSync as Ha,readdirSync as za,rmSync as Ya}from"fs";import{join as qa,resolve as Ja}from"path";import{Option as Q}from"commander";import*as A from"@clack/prompts";import*as ft from"@clack/prompts";import Gt from"picocolors";function xn(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";ft.intro(Gt.bgYellow(Gt.black(t)))}function Cn(){ft.outro(Gt.yellow("Happy building!"))}import*as g from"@clack/prompts";import y from"picocolors";var et={nextjs:{label:"Next.js",hint:"React 19 + Next.js 16"},nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"}},tt={fullstack:{label:"Fullstack",hint:"Frontend hosts the API - works on serverless or long-running"},separate:{label:"Separate",hint:"Standalone Hono backend - long-running runtimes only (Docker, Render, Fly.io, Railway, Coolify, Dokploy)"}},gt={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},ht={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},yt={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},De={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},nt={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var Se={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var ne={node:{label:"Node.js / Docker",hint:"long-running runtime - Render, Fly.io, Railway, Coolify, Dokploy, VPS",edgeRuntime:!1},vercel:{label:"Vercel",hint:"serverless functions",edgeRuntime:!0}},G={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},re={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},rt=[{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."}],ot=[{architecture:"separate",target:"vercel",reason:"Standalone backends need a long-running runtime. Vercel's per-function TypeScript check conflicts with pnpm's isolated install. Use --architecture fullstack for serverless, or deploy the standalone backend to a long-running runtime (Render, Fly.io, Railway, Coolify, Dokploy, or your own VPS via Docker)."}],Dn=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];function vt(e){let t=G[e.databaseProvider].managed,n=re[e.cacheProvider].managed;return e.dockerServices.some(r=>!(r==="postgres"&&t||r==="redis"&&n))}var se={google:{label:"Google",envVars:[{name:"GOOGLE_CLIENT_ID",secret:!1},{name:"GOOGLE_CLIENT_SECRET",secret:!0}]},github:{label:"GitHub",envVars:[{name:"GITHUB_CLIENT_ID",secret:!1},{name:"GITHUB_CLIENT_SECRET",secret:!0}]},facebook:{label:"Facebook",envVars:[{name:"FACEBOOK_CLIENT_ID",secret:!1},{name:"FACEBOOK_CLIENT_SECRET",secret:!0}]},discord:{label:"Discord",envVars:[{name:"DISCORD_CLIENT_ID",secret:!1},{name:"DISCORD_CLIENT_SECRET",secret:!0}]},x:{label:"X",envVars:[{name:"TWITTER_CLIENT_ID",secret:!1},{name:"TWITTER_CLIENT_SECRET",secret:!0}]}};var Ee=["nextjs","nuxt"],Ne=["fullstack","separate"],Le=["stripe","polar","none"],$e=["smtp","ses","resend"],je=["postgres","redis","inngest","mailpit"],Ue=["claude-code","cursor","codex","gemini-cli","windsurf"],Me=["user","organization"],ce=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],le=["node","vercel"],pe=["postgres","neon","supabase"],de=["redis","upstash"],Ve=["google","github","facebook","discord","x"];function kt(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function wt(e){return/^[a-z][a-z0-9-]*$/.test(e)}function C(e){return e instanceof Error?e.message:String(e)}var Nn=["companion","mcpServer","rag"];function zt(e){if(!Nn.some(n=>e[n]===!0))return e;if(e.ai===!1)throw new Error("--companion / --mcp-server / --rag require AI features; remove --no-ai.");return e.ai===void 0&&(e.ai=!0),e}function Ln(e){return Nn.some(n=>e[n]===!0)&&(e.ai=!0),e}function $n(e){let t={};if(e.name!==void 0){if(!wt(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Ee.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Ee.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org!==!0)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.desktop!==void 0&&(t.desktop=e.desktop),e.desktopAuto!==void 0&&(t.desktopAutoRelease=e.desktopAuto),e.desktopAi!==void 0){if(e.desktopAi===!0&&e.desktop!==!0)throw new Error("--desktop-ai requires --desktop to be enabled.");t.desktopAi=e.desktopAi}if(e.ai!==void 0&&(t.ai=e.ai),e.rag!==void 0&&(t.rag=e.rag),e.companion!==void 0&&(t.companion=e.companion),e.mcpServer!==void 0&&(t.mcpServer=e.mcpServer),e.aiByok!==void 0&&(t.aiByok=e.aiByok),zt(t),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=Ht(e.docker,je,"docker service")),e.aiTools!==void 0&&(t.aiTools=Ht(e.aiTools,Ue,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=Ht(e.socialProviders,Ve,"social provider")),e.currency!==void 0){if(!ce.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${ce.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!le.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${le.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!pe.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${pe.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!de.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${de.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let n=e.baseUrl.trim();if(n==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let r;try{r=new URL(n)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${r.protocol}//${r.host}`}return t}var ue={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,desktop:!1,desktopAutoRelease:!1,desktopAi:!1,ai:!1,rag:!1,companion:!1,mcpServer:!1,aiByok:!0,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function jn(e){let t=e.projectName??ue.projectName,n=e.projectDir??`./${t}`,r=e.appName??kt(t),o=e.deploymentTarget??ue.deploymentTarget,i=ne[o]?.edgeRuntime??!1,a=e.databaseProvider??(i?"neon":ue.databaseProvider),s=e.cacheProvider??(i?"upstash":ue.cacheProvider),p=e.emailProvider??(i?"resend":ue.emailProvider),f=e.dockerServices??(i?ue.dockerServices.filter(d=>d!=="postgres"&&d!=="redis"):ue.dockerServices),m={...ue,...e,projectName:t,appName:r,projectDir:n,deploymentTarget:o,databaseProvider:a,cacheProvider:s,emailProvider:p,dockerServices:f};m.paymentProvider==="none"&&(m.credits=!1),m.multiTenancy||(m.billingScope="user"),m.ai||(m.aiByok=ue.aiByok);for(let d of rt){if(m.deploymentTarget!==d.target)continue;let v=m.databaseProvider===d.provider?"database":"cache";if(m.databaseProvider===d.provider||m.cacheProvider===d.provider)throw new Error(`Incompatible: --deploy ${d.target} + --${v} ${d.provider}. ${d.reason}`)}for(let d of ot)if(m.architecture===d.architecture&&m.deploymentTarget===d.target)throw new Error(`Incompatible: --architecture ${d.architecture} + --deploy ${d.target}. ${d.reason}`);return m}function Ht(e,t,n){if(e.trim()==="")return[];let r=e.split(",").map(i=>i.trim()).filter(Boolean),o=r.filter(i=>!t.includes(i));if(o.length>0)throw new Error(`Invalid ${n}(s): ${o.join(", ")}. Valid values: ${t.join(", ")}`);return r}function E(e){g.isCancel(e)&&(g.cancel("Setup cancelled."),process.exit(0))}function Yt(e){let t=[];e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0}));for(let n of e.socialProviders){let r=se[n];for(let o of r.envVars)t.push({key:o.name,message:`${o.name} (${r.label}, optional):`,secret:o.secret})}return e.demo&&t.push({key:"TURNSTILE_SECRET_KEY",message:"Cloudflare Turnstile secret key (optional):",secret:!0}),t}async function Un(e,t){let n=!1;e&&zt(e),g.log.info(y.bold("Project"));let r=e?.projectName??await(async()=>{n=!0;let c=await g.text({message:"Project name:",placeholder:"my-saas",validate:u=>{if(!u?.trim())return"Project name is required.";if(!wt(u))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return E(c),c})(),o=e?.appName??await(async()=>{n=!0;let c=await g.text({message:"App name:",initialValue:kt(r),validate:u=>{if(!u?.trim())return"App name is required."}});return E(c),c})(),i=e?.projectDir??await(async()=>{n=!0;let c=await g.text({message:"Project location:",initialValue:`./${r}`});return E(c),c==="."?process.cwd():c})(),a=e?.frontend??await(async()=>{n=!0;let c=Object.keys(et),u=await g.select({message:"Frontend framework:",options:c.map(S=>({value:S,label:et[S].label,hint:et[S].hint}))});return E(u),u})();g.log.info(y.bold("Infrastructure"));let s=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){n=!0;let c=await g.select({message:"Deployment target:",options:le.map(u=>({value:u,label:ne[u].label,hint:ne[u].hint}))});E(c),s=c}let p=e?.architecture?ot.find(c=>c.architecture===e.architecture&&c.target===s):void 0;if(p)throw new Error(`Incompatible: --architecture ${p.architecture} + --deploy ${p.target}. ${p.reason}`);let f=new Set(ot.filter(c=>c.target===s).map(c=>c.architecture)),m=Ne.filter(c=>!f.has(c)),d=e?.architecture??await(async()=>{if(m.length===1){let u=m[0];return g.log.info(`Auto-selected ${tt[u].label} architecture (only compatible option for ${ne[s].label}).`),u}n=!0;let c=await g.select({message:"Architecture:",options:m.map(u=>({value:u,label:tt[u].label,hint:tt[u].hint}))});return E(c),c})(),v=e?.databaseProvider??await(async()=>{n=!0;let c=pe.filter(S=>!rt.some(F=>F.target===s&&F.provider===S));if(c.length===1){let S=c[0];return g.log.info(`Auto-selected ${G[S].label} (only compatible option for ${ne[s].label}).`),S}let u=await g.select({message:"Database provider:",options:c.map(S=>({value:S,label:G[S].label,hint:G[S].hint}))});return E(u),u})(),b=e?.cacheProvider??await(async()=>{n=!0;let c=de.filter(S=>!rt.some(F=>F.target===s&&F.provider===S));if(c.length===1){let S=c[0];return g.log.info(`Auto-selected ${re[S].label} (only compatible option for ${ne[s].label}).`),S}let u=await g.select({message:"Cache provider:",options:c.map(S=>({value:S,label:re[S].label,hint:re[S].hint}))});return E(u),u})();if(ne[s]?.edgeRuntime){let c=Dn.map(u=>` - ${u}`).join(`
3
- `);g.note(c,"Unavailable on edge runtime")}g.log.info(y.bold("Features"));let I=e?.paymentProvider??await(async()=>{n=!0;let c=await g.select({message:"Payment provider:",options:Le.map(u=>({value:u,label:gt[u].label,hint:gt[u].hint}))});return E(c),c})(),z=e?.defaultCurrency??await(async()=>{if(I==="none")return"USD";n=!0;let c=await g.select({message:"Default currency:",options:ce.map(u=>({value:u,label:u,hint:Se[u].name}))});return E(c),c})(),L=e?.emailProvider??await(async()=>{n=!0;let c=await g.select({message:"Email provider:",options:$e.map(u=>({value:u,label:ht[u].label,hint:ht[u].hint}))});return E(c),c})(),K=e?.multiTenancy??await(async()=>{n=!0;let c=await g.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return E(c),c})(),ge=K?e?.billingScope??"user":"user";if(K&&e?.billingScope===void 0){n=!0;let c=await g.select({message:"Billing scope:",options:Me.map(u=>({value:u,label:yt[u].label,hint:yt[u].hint}))});E(c),ge=c}let Y=e?.blog??await(async()=>{n=!0;let c=await g.confirm({message:"Enable blog?",initialValue:!0});return E(c),c})(),k=e?.docs??await(async()=>{n=!0;let c=await g.confirm({message:"Include docs app? (self-hosted Fumadocs documentation site)",initialValue:!1});return E(c),c})(),R=t?.desktopAllowed!==!1,P=e?.desktop??(R?await(async()=>{n=!0;let c=await g.confirm({message:"Include the Electron desktop app? (apps/desktop - cross-platform, device-auth)",initialValue:!1});return E(c),c})():(g.log.info(y.dim("Desktop app: available on the Pro plan and up - skipped.")),!1)),ae=P?e?.desktopAutoRelease??await(async()=>{n=!0;let c=await g.select({message:"Desktop release trigger:",options:[{value:!1,label:"Manual only",hint:"run from the Actions tab (saves CI minutes)"},{value:!0,label:"Automatic",hint:"release on every CI success on main"}],initialValue:!1});return E(c),c})():!1,$=e?.ai??await(async()=>{n=!0;let c=await g.confirm({message:"Add AI features? (chat, models, schedules, integrations - and unlocks the companion + MCP server)",initialValue:!1});return E(c),c})(),T=$?e?.rag??await(async()=>{n=!0;let c=await g.confirm({message:"Add server-side RAG knowledge (pgvector embeddings + semantic search)?",initialValue:!1});return E(c),c})():!1,we=$?e?.companion??await(async()=>{n=!0;let c=await g.confirm({message:"Add the companion daemon? A small program your users install on their own machine or VPS to run their Claude Code / Codex / OpenCode subscription for this app 24/7 - the AI runs on their hardware, not yours.",initialValue:!1});return E(c),c})():!1,Pn=$?e?.mcpServer??await(async()=>{n=!0;let c=await g.confirm({message:"Add the outward MCP server? Lets external agents (Claude Code, Codex, Hermes, OpenClaw) control the app on a user's behalf over an authenticated MCP endpoint.",initialValue:!1});return E(c),c})():!1,Tn=$?e?.aiByok??await(async()=>{n=!0;let c=await g.confirm({message:"AI BYOK mode? (end-users bring their own provider key; no = operator-keyed, credit-metered)",initialValue:!0});return E(c),c})():!0,Rn=e?.revenueSharing??await(async()=>{n=!0;let c=await g.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return E(c),c})(),_n=I==="none"?!1:e?.credits??await(async()=>{n=!0;let c=await g.confirm({message:"Enable credits? (metered usage on top of subscription plans)",initialValue:!0});return E(c),c})(),ut=e?.socialProviders??await(async()=>{n=!0;let c=Ve.map(S=>({value:S,label:se[S].label,hint:`requires ${se[S].envVars.map(F=>F.name).join(" / ")}`})),u=await g.multiselect({message:"Which social login providers should the sign-in screen show?",options:c,initialValues:[],required:!1});return E(u),u})();g.log.info(y.bold("Tooling"));let Ft=e?.dockerServices??await(async()=>{n=!0;let c=[...je].filter(B=>B!=="mailpit");L==="smtp"&&c.push("mailpit");let u=c.map(B=>({value:B,label:De[B].label,hint:De[B].hint})),S=u.map(B=>B.value).filter(B=>!(B==="postgres"&&(v==="neon"||v==="supabase")||B==="redis"&&b==="upstash")),F=await g.multiselect({message:"Which services should we set up in Docker for you?",options:u,initialValues:S,required:!1});return E(F),F})(),Bt=e?.aiTools??await(async()=>{n=!0;let c=Ue.map(S=>({value:S,label:nt[S].label})),u=await g.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return E(u),u})(),Kt=e?.demo,mt=Yt({databaseProvider:v,cacheProvider:b,paymentProvider:I,emailProvider:L,socialProviders:ut,demo:Kt}),Qe={};if(mt.length>0&&n){g.log.info(y.bold("Credentials")+y.dim(" all optional - press Enter to skip, fill in .env later"));for(let c of mt)if(n=!0,c.secret){let u=await g.password({message:c.message,mask:"*"});E(u),typeof u=="string"&&u.trim()&&(Qe[c.key]=u.trim())}else{let u=await g.text({message:c.message,placeholder:c.placeholder});E(u),typeof u=="string"&&u.trim()&&(Qe[c.key]=u.trim())}}if(n){let c=[` Name: ${y.cyan(r)}`,` App name: ${y.cyan(o)}`,` Location: ${y.cyan(i)}`,` Frontend: ${y.cyan(et[a].label)}`,` Architecture: ${y.cyan(tt[d].label)}`].join(`
4
- `),u=[` Deploy target: ${y.cyan(ne[s]?.label??"Node.js / Docker")}`,` Database: ${y.cyan(G[v].label)}`,` Cache: ${y.cyan(re[b].label)}`,Ft.length>0?` Docker: ${y.cyan(Ft.map(be=>De[be].label).join(", "))}`:` Docker: ${y.dim("none")}`].filter(Boolean).join(`
5
- `),S=[I!=="none"?` Payment: ${y.cyan(gt[I].label)} (${z})`:` Payment: ${y.dim("none")}`,` Credits: ${_n?y.cyan("Yes"):y.dim("No")}`,` AI features: ${$?y.cyan("Yes"):y.dim("No")}`,...$?[` AI mode: ${y.cyan(Tn?"BYOK":"Operator-keyed (credits)")}`,` RAG knowledge: ${T?y.cyan("Yes"):y.dim("No")}`,` Companion: ${we?y.cyan("Yes"):y.dim("No")}`,` MCP server: ${Pn?y.cyan("Yes"):y.dim("No")}`]:[],` Email: ${y.cyan(ht[L].label)}`,` Multi-tenancy: ${K?y.cyan("Yes")+` (billing: ${yt[ge].label})`:y.dim("No")}`,` Blog: ${Y?y.cyan("Yes"):y.dim("No")}`,` Docs app: ${k?y.cyan("Yes"):y.dim("No")}`,` Desktop app: ${P?y.cyan("Yes"):y.dim("No")}`,...P?[` Releases: ${y.cyan(ae?"Automatic on CI":"Manual only")}`]:[],` Rev. sharing: ${Rn?y.cyan("Yes"):y.dim("No")}`,ut.length>0?` Social login: ${y.cyan(ut.map(be=>se[be].label).join(", "))}`:` Social login: ${y.dim("none")}`,Bt.length>0?` AI tools: ${y.cyan(Bt.map(be=>nt[be].label).join(", "))}`:` AI tools: ${y.dim("none")}`].join(`
6
- `),F=[y.bold("Project"),c,"",y.bold("Infrastructure"),u,"",y.bold("Features"),S];if(mt.length>0){let be=mt.map(On=>{let xo=Qe[On.key]?y.green("provided"):y.dim("skipped");return` ${On.key}: ${xo}`}).join(`
7
- `);F.push("",y.bold("Credentials"),be)}g.note(F.join(`
8
- `),"Summary");let B=await g.confirm({message:"Proceed with these settings?"});(g.isCancel(B)||!B)&&(g.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:o,projectDir:i,frontend:a,architecture:d,deploymentTarget:s,databaseProvider:v,cacheProvider:b,paymentProvider:I,emailProvider:L,multiTenancy:K,billingScope:ge,blog:Y,docs:k,desktop:P,desktopAutoRelease:ae,desktopAi:P?e?.desktopAi??!1:!1,ai:$,rag:T,companion:we,mcpServer:Pn,aiByok:Tn,revenueSharing:Rn,credits:_n,dockerServices:Ft,aiTools:Bt,socialProviders:ut,defaultCurrency:z,...Object.keys(Qe).length>0?{credentials:Qe}:{},...e?.baseUrl!==void 0?{baseUrl:e.baseUrl}:{},...Kt!==void 0?{demo:Kt}:{}}}import{createReadStream as Fo}from"fs";import{mkdir as Bo}from"fs/promises";import{Readable as Ko}from"stream";import{pipeline as zn}from"stream/promises";import{extract as Go}from"tar";import{join as Ae}from"path";import{homedir as Co}from"os";var it=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",q=".generatesaas",he=Ae(q,"manifest.json"),Mn=Ae(q,"hashes.json"),bt=Ae(q,"template-hashes.json"),St=Ae(q,"template"),Vn=Ae(q,"staging"),Fn=Ae(q,"staging.json"),me=Ae(Co(),".generatesaas");var U=class extends Error{constructor(n,r,o){super(r);this.status=n;this.body=o}status;body;name="ApiError"};function fe(e){return{apiKey:e,baseUrl:it}}async function ye(e,t,n){let r=`${e.baseUrl}${t}`,o=await fetch(r,{...n,headers:{...n?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!o.ok){let i,a;try{a=await o.json(),i=a.error??`API ${o.status}: ${t}`}catch{i=`API ${o.status}: ${t}`}throw new U(o.status,i,a)}return o}import{existsSync as Do,readFileSync as No,writeFileSync as Lo,mkdirSync as $o}from"fs";import{dirname as jo}from"path";import*as ve from"@clack/prompts";function at(){if(!Do(me))return null;try{let e=JSON.parse(No(me,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&ve.log.warning(`Found old GitHub token in ${me}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function Ie(e){$o(jo(me),{recursive:!0}),Lo(me,JSON.stringify({apiKey:e},null," ")+`
9
- `,{mode:384})}async function Fe(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let n=at();if(n)return n;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return st()}async function st(){let e=await ve.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return ve.isCancel(e)&&(ve.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function ke(e){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{latest:"0.0.0-ci",versions:[{version:"0.0.0-ci",date:new Date().toISOString(),breaking:!1}],entitlements:null}:await(await ye(e,"/versions")).json()}async function qt(e,t){try{return await(await ye(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(n){if(n instanceof U&&n.status===404)return null;throw n}}async function Bn(e,t){return await(await ye(e,`/skill/${encodeURIComponent(t)}`)).json()}function Et(e){if(!(e instanceof U)||e.status!==403)return null;let t=e.body;return!t||t.code!=="update_window_expired"?null:{message:e.message,lastAllowedVersion:t.lastAllowedVersion??null}}function Kn(e){return{frontend:e.frontend,architecture:e.architecture,deployTarget:e.deploymentTarget,database:e.databaseProvider,cache:e.cacheProvider,payment:e.paymentProvider,email:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,credits:e.credits,revenueSharing:e.revenueSharing,socialProviders:e.socialProviders,aiTools:e.aiTools,currency:e.defaultCurrency}}async function Jt(e,t){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{token:"offline-test-token",licenseId:"offline-test-license-id",installId:t.installId}:await(await ye(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Gn(e,t){return await(await ye(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Wt(e,t){let n=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)});if(!n.ok)throw new Error(`Verification service returned ${n.status}`);return await n.json()}async function Hn(e,t,n){let r=await fetch(`${e}/license/inspect`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify(n)});if(!r.ok){let o=await r.json().catch(()=>null);throw new Error(o?.error??`Inspect endpoint returned ${r.status}`)}return await r.json()}var Xt=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".wrangler",".devcontainer","playwright-report","test-results"]),Zt=new Set(["pnpm-lock.yaml"]);function Be(e){if(Qt(e))return!0;for(let t of e.split("/"))if(Zt.has(t))return!0;return!1}var Uo=new Set(["data","mksaas","references","scripts",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","README.md","TODO.md","OVERVIEW.md"]),Mo=["scripts/knowledge-corpus.ts","scripts/knowledge-corpus.test.ts","scripts/knowledge-lint.ts","scripts/knowledge-build.ts","scripts/dev-ai-setup.ts","scripts/docs-lint.ts"],Vo=["docs/superpowers","packages/cli","packages/cli-api","infra/docker-compose.yml",".claude/commands",".claude/skills/web-next-port",".claude/skills/web-next-port-workspace",".claude/settings.local.json",".claude/worktrees"];function Qt(e){let t=e.split("/");for(let n of t)if(Xt.has(n))return!0;if(Mo.includes(e))return!1;if(Uo.has(t[0]))return!0;for(let n of Vo)if(e===n||e.startsWith(n+"/"))return!0;return!1}async function At(e,t,n){await Bo(n,{recursive:!0});let r=process.env.GENERATESAAS_TEMPLATE_TARBALL;if(r){await zn(Fo(r),Yn(n));return}let o=await ye(e,`/template/${encodeURIComponent(t)}`);if(!o.body)throw new Error("Empty response body");let i=Ko.fromWeb(o.body);await zn(i,Yn(n))}function Yn(e){return Go({cwd:e,strip:1,filter:t=>{let n=t.replace(/^[^/]+\//,"");return n?!Qt(n):!0},sync:!1})}import{readdir as Ho,readFile as en,rm as Jn,writeFile as tn}from"fs/promises";import{join as Ke}from"path";var zo=["apps/web-nuxt/public/images/blog","apps/web-next/public/images/blog","packages/content/en/blog","packages/content/ro/blog"];async function Wn(e){await Promise.all(zo.map(t=>Jn(Ke(e,t),{recursive:!0,force:!0})))}var Yo="packages/config/src/blog.ts";async function Xn(e){let t=Ke(e,Yo),n=await en(t,"utf-8"),r=qn(qn(n,"blogCategories",t),"blogAuthors",t);await tn(t,r)}function qn(e,t,n){let r=new RegExp(`(export const ${t}\\b[^=]*=\\s*)\\[[\\s\\S]*?\\];`);if(!r.test(e))throw new Error(`emptyBlogConfig: could not find the \`export const ${t} = [...]\` declaration in ${n}. The boilerplate blog config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);return e.replace(r,"$1[];")}async function Zn(e){let t=Ke(e,"packages/i18n/translations"),n;try{n=await Ho(t)}catch{return}for(let r of n){let o=Ke(t,r,"web.json"),i;try{i=await en(o,"utf-8")}catch{continue}let a=JSON.parse(i);!a.blog||a.blog.categories===void 0||(a.blog.categories={},await tn(o,JSON.stringify(a,null," ")+`
10
- `))}}async function Qn(e,t){t.includes("claude-code")||await Jn(Ke(e,".claude"),{recursive:!0,force:!0})}async function er(e,t){let n=Ke(e,".claude","settings.json"),r;try{r=await en(n,"utf8")}catch{return}let o=JSON.parse(r);delete o.alwaysThinkingEnabled,delete o.enableAllProjectMcpServers,o.env&&(delete o.env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS,Object.keys(o.env).length===0&&delete o.env),o.permissions?.allow&&(o.permissions.allow=o.permissions.allow.filter(i=>qo(i,t))),await tn(n,JSON.stringify(o,null," ")+`
11
- `)}function qo(e,t){return!(e.startsWith("mcp__")||t!=="nuxt"&&e.includes("nuxt"))}import{join as tr}from"path";import{mkdir as Jo,readdir as Wo,rm as Xo,rmdir as Zo,writeFile as Qo}from"fs/promises";import{dirname as It,join as ei,relative as ti,sep as ni}from"path";function Pe(e){return e.split(ni).join("/")}async function Pt(e){await Jo(e,{recursive:!0})}async function l(e,t){await Pt(It(e)),await Qo(e,t,"utf-8")}async function nn(e,t){await Xo(e,{force:!0});let n=It(e);for(;n!==t&&n!==It(n);){try{await Zo(n)}catch{return}n=It(n)}}async function Te(e,t,n){let r=[],o=await Wo(e,{withFileTypes:!0});for(let i of o){let a=ei(e,i.name),s=Pe(ti(t,a));n(s)||(i.isDirectory()?r.push(...await Te(a,t,n)):i.isFile()&&r.push(a))}return r}var ri={postgres:"Postgres",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"},oi={resend:"Resend",ses:"Amazon SES",smtp:"SMTP"},ii={redis:"Redis",upstash:"Upstash Redis"},ai={node:"Node.js / Docker",vercel:"Vercel"},si={stripe:"Stripe",polar:"Polar"};function ci(e){let t=e.frontend==="nuxt",n=t?"Nuxt 4":"Next.js 16",r=t?"apps/web-nuxt":"apps/web-next",o=t?"`app/` pages + components + composables":"`app/` routes, `components/`, `lib/`",i=e.architecture==="fullstack",a=i?"(fullstack - Hono API mounted inside the app)":"(separate - standalone Hono backend)",s=i?`Mounted inside \`${r}\`. A standalone \`apps/backend\` is also kept (inert) so you can switch to separate later.`:"Runs from `apps/backend`; the frontend reaches it over HTTP.",p=ii[e.cacheProvider],f=ai[e.deploymentTarget],m=e.paymentProvider==="none"?"":`
12
- - **Payments:** ${si[e.paymentProvider]}`,d=e.desktop?", and the Electron desktop app under `docs/desktop/`":"",v=t?"`$t('key')` in templates (global helper); `useI18n()` from `vue-i18n` in `<script setup>` for `locale`/`setLocale`/`t()`.":"`useTranslations()` from `next-intl` in components; messages are loaded in `apps/web-next/i18n/request.ts`.",b=t?"**Navigation:** always use `localePath()` for paths (hardcoded paths break non-default locales); `await navigateTo()` in SSR.":"**Navigation:** `next/link` for links; `redirect()` from `next/navigation` for programmatic redirects in Server Components.";return`# AGENTS.md
2
+ import{Command as Va}from"commander";import*as Ci from"@clack/prompts";import{existsSync as ia,readdirSync as oa,rmSync as sa}from"fs";import{join as aa,resolve as ca}from"path";import{Option as ee}from"commander";import*as E from"@clack/prompts";import*as ft from"@clack/prompts";import zt from"picocolors";function Dn(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";ft.intro(zt.bgYellow(zt.black(t)))}function Nn(){ft.outro(zt.yellow("Happy building!"))}import*as g from"@clack/prompts";import h from"picocolors";var tt={nextjs:{label:"Next.js",hint:"React 19 + Next.js 16"},nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"}},nt={fullstack:{label:"Fullstack",hint:"Frontend hosts the API - works on serverless or long-running"},separate:{label:"Separate",hint:"Standalone Hono backend - long-running runtimes only (Docker, Render, Fly.io, Railway, Coolify, Dokploy)"}},gt={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},ht={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},yt={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},Le={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},rt={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var Ae={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var re={node:{label:"Node.js / Docker",hint:"long-running runtime - Render, Fly.io, Railway, Coolify, Dokploy, VPS",edgeRuntime:!1},vercel:{label:"Vercel",hint:"serverless functions",edgeRuntime:!0}},Y={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},ie={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},it=[{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."}],ot=[{architecture:"separate",target:"vercel",reason:"Standalone backends need a long-running runtime. Vercel's per-function TypeScript check conflicts with pnpm's isolated install. Use --architecture fullstack for serverless, or deploy the standalone backend to a long-running runtime (Render, Fly.io, Railway, Coolify, Dokploy, or your own VPS via Docker)."}],Ln=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];function vt(e){let t=Y[e.databaseProvider].managed,n=ie[e.cacheProvider].managed;return e.dockerServices.some(r=>!(r==="postgres"&&t||r==="redis"&&n))}var ce={google:{label:"Google",envVars:[{name:"GOOGLE_CLIENT_ID",secret:!1},{name:"GOOGLE_CLIENT_SECRET",secret:!0}]},github:{label:"GitHub",envVars:[{name:"GITHUB_CLIENT_ID",secret:!1},{name:"GITHUB_CLIENT_SECRET",secret:!0}]},facebook:{label:"Facebook",envVars:[{name:"FACEBOOK_CLIENT_ID",secret:!1},{name:"FACEBOOK_CLIENT_SECRET",secret:!0}]},discord:{label:"Discord",envVars:[{name:"DISCORD_CLIENT_ID",secret:!1},{name:"DISCORD_CLIENT_SECRET",secret:!0}]},x:{label:"X",envVars:[{name:"TWITTER_CLIENT_ID",secret:!1},{name:"TWITTER_CLIENT_SECRET",secret:!0}]}};var Ie=["nextjs","nuxt"],$e=["fullstack","separate"],je=["stripe","polar","none"],Ue=["smtp","ses","resend"],Me=["postgres","redis","inngest","mailpit"],Ve=["claude-code","cursor","codex","gemini-cli","windsurf"],Be=["user","organization"],le=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],pe=["node","vercel"],de=["postgres","neon","supabase"],ue=["redis","upstash"],Fe=["google","github","facebook","discord","x"];function bt(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function kt(e){return/^[a-z][a-z0-9-]*$/.test(e)}function L(e){return e instanceof Error?e.message:String(e)}var $n=["companion","mcpServer","rag"];function qt(e){if(!$n.some(n=>e[n]===!0))return e;if(e.ai===!1)throw new Error("--companion / --mcp-server / --rag require AI features; remove --no-ai.");return e.ai===void 0&&(e.ai=!0),e}function jn(e){return $n.some(n=>e[n]===!0)&&(e.ai=!0),e}function Un(e){let t={};if(e.name!==void 0){if(!kt(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Ie.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Ie.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org!==!0)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.desktop!==void 0&&(t.desktop=e.desktop),e.desktopAuto!==void 0&&(t.desktopAutoRelease=e.desktopAuto),e.desktopAi!==void 0){if(e.desktopAi===!0&&e.desktop!==!0)throw new Error("--desktop-ai requires --desktop to be enabled.");t.desktopAi=e.desktopAi}if(e.ai!==void 0&&(t.ai=e.ai),e.rag!==void 0&&(t.rag=e.rag),e.companion!==void 0&&(t.companion=e.companion),e.mcpServer!==void 0&&(t.mcpServer=e.mcpServer),e.aiByok!==void 0&&(t.aiByok=e.aiByok),qt(t),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=Yt(e.docker,Me,"docker service")),e.aiTools!==void 0&&(t.aiTools=Yt(e.aiTools,Ve,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=Yt(e.socialProviders,Fe,"social provider")),e.currency!==void 0){if(!le.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${le.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!pe.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${pe.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!de.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${de.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!ue.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${ue.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let n=e.baseUrl.trim();if(n==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let r;try{r=new URL(n)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${r.protocol}//${r.host}`}return t}var me={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,desktop:!1,desktopAutoRelease:!1,desktopAi:!1,ai:!1,rag:!1,companion:!1,mcpServer:!1,aiByok:!0,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function Mn(e){let t=e.projectName??me.projectName,n=e.projectDir??`./${t}`,r=e.appName??bt(t),i=e.deploymentTarget??me.deploymentTarget,o=re[i]?.edgeRuntime??!1,s=e.databaseProvider??(o?"neon":me.databaseProvider),a=e.cacheProvider??(o?"upstash":me.cacheProvider),d=e.emailProvider??(o?"resend":me.emailProvider),m=e.dockerServices??(o?me.dockerServices.filter(f=>f!=="postgres"&&f!=="redis"):me.dockerServices),p={...me,...e,projectName:t,appName:r,projectDir:n,deploymentTarget:i,databaseProvider:s,cacheProvider:a,emailProvider:d,dockerServices:m};p.paymentProvider==="none"&&(p.credits=!1),p.multiTenancy||(p.billingScope="user"),p.ai||(p.aiByok=me.aiByok);for(let f of it){if(p.deploymentTarget!==f.target)continue;let w=p.databaseProvider===f.provider?"database":"cache";if(p.databaseProvider===f.provider||p.cacheProvider===f.provider)throw new Error(`Incompatible: --deploy ${f.target} + --${w} ${f.provider}. ${f.reason}`)}for(let f of ot)if(p.architecture===f.architecture&&p.deploymentTarget===f.target)throw new Error(`Incompatible: --architecture ${f.architecture} + --deploy ${f.target}. ${f.reason}`);return p}function Yt(e,t,n){if(e.trim()==="")return[];let r=e.split(",").map(o=>o.trim()).filter(Boolean),i=r.filter(o=>!t.includes(o));if(i.length>0)throw new Error(`Invalid ${n}(s): ${i.join(", ")}. Valid values: ${t.join(", ")}`);return r}function S(e){g.isCancel(e)&&(g.cancel("Setup cancelled."),process.exit(0))}function Jt(e){let t=[];e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0}));for(let n of e.socialProviders){let r=ce[n];for(let i of r.envVars)t.push({key:i.name,message:`${i.name} (${r.label}, optional):`,secret:i.secret})}return e.demo&&t.push({key:"TURNSTILE_SECRET_KEY",message:"Cloudflare Turnstile secret key (optional):",secret:!0}),t}async function Vn(e,t){let n=!1;e&&qt(e),g.log.info(h.bold("Project"));let r=e?.projectName??await(async()=>{n=!0;let c=await g.text({message:"Project name:",placeholder:"my-saas",validate:u=>{if(!u?.trim())return"Project name is required.";if(!kt(u))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return S(c),c})(),i=e?.appName??await(async()=>{n=!0;let c=await g.text({message:"App name:",initialValue:bt(r),validate:u=>{if(!u?.trim())return"App name is required."}});return S(c),c})(),o=e?.projectDir??await(async()=>{n=!0;let c=await g.text({message:"Project location:",initialValue:`./${r}`});return S(c),c==="."?process.cwd():c})(),s=e?.frontend??await(async()=>{n=!0;let c=Object.keys(tt),u=await g.select({message:"Frontend framework:",options:c.map(k=>({value:k,label:tt[k].label,hint:tt[k].hint}))});return S(u),u})();g.log.info(h.bold("Infrastructure"));let a=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){n=!0;let c=await g.select({message:"Deployment target:",options:pe.map(u=>({value:u,label:re[u].label,hint:re[u].hint}))});S(c),a=c}let d=e?.architecture?ot.find(c=>c.architecture===e.architecture&&c.target===a):void 0;if(d)throw new Error(`Incompatible: --architecture ${d.architecture} + --deploy ${d.target}. ${d.reason}`);let m=new Set(ot.filter(c=>c.target===a).map(c=>c.architecture)),p=$e.filter(c=>!m.has(c)),f=e?.architecture??await(async()=>{if(p.length===1){let u=p[0];return g.log.info(`Auto-selected ${nt[u].label} architecture (only compatible option for ${re[a].label}).`),u}n=!0;let c=await g.select({message:"Architecture:",options:p.map(u=>({value:u,label:nt[u].label,hint:nt[u].hint}))});return S(c),c})(),w=e?.databaseProvider??await(async()=>{n=!0;let c=de.filter(k=>!it.some(G=>G.target===a&&G.provider===k));if(c.length===1){let k=c[0];return g.log.info(`Auto-selected ${Y[k].label} (only compatible option for ${re[a].label}).`),k}let u=await g.select({message:"Database provider:",options:c.map(k=>({value:k,label:Y[k].label,hint:Y[k].hint}))});return S(u),u})(),b=e?.cacheProvider??await(async()=>{n=!0;let c=ue.filter(k=>!it.some(G=>G.target===a&&G.provider===k));if(c.length===1){let k=c[0];return g.log.info(`Auto-selected ${ie[k].label} (only compatible option for ${re[a].label}).`),k}let u=await g.select({message:"Cache provider:",options:c.map(k=>({value:k,label:ie[k].label,hint:ie[k].hint}))});return S(u),u})();if(re[a]?.edgeRuntime){let c=Ln.map(u=>` - ${u}`).join(`
3
+ `);g.note(c,"Unavailable on edge runtime")}g.log.info(h.bold("Features"));let A=e?.paymentProvider??await(async()=>{n=!0;let c=await g.select({message:"Payment provider:",options:je.map(u=>({value:u,label:gt[u].label,hint:gt[u].hint}))});return S(c),c})(),J=e?.defaultCurrency??await(async()=>{if(A==="none")return"USD";n=!0;let c=await g.select({message:"Default currency:",options:le.map(u=>({value:u,label:u,hint:Ae[u].name}))});return S(c),c})(),V=e?.emailProvider??await(async()=>{n=!0;let c=await g.select({message:"Email provider:",options:Ue.map(u=>({value:u,label:ht[u].label,hint:ht[u].hint}))});return S(c),c})(),R=e?.multiTenancy??await(async()=>{n=!0;let c=await g.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return S(c),c})(),ae=R?e?.billingScope??"user":"user";if(R&&e?.billingScope===void 0){n=!0;let c=await g.select({message:"Billing scope:",options:Be.map(u=>({value:u,label:yt[u].label,hint:yt[u].hint}))});S(c),ae=c}let B=e?.blog??await(async()=>{n=!0;let c=await g.confirm({message:"Enable blog?",initialValue:!0});return S(c),c})(),v=e?.docs??await(async()=>{n=!0;let c=await g.confirm({message:"Include docs app? (self-hosted Fumadocs documentation site)",initialValue:!1});return S(c),c})(),P=t?.desktopAllowed!==!1,_=e?.desktop??(P?await(async()=>{n=!0;let c=await g.confirm({message:"Include the desktop app? (apps/tauri - cross-platform, built with Tauri, device-auth)",initialValue:!1});return S(c),c})():(g.log.info(h.dim("Desktop app: available on the Pro plan and up - skipped.")),!1)),z=_?e?.desktopAutoRelease??await(async()=>{n=!0;let c=await g.select({message:"Desktop release trigger:",options:[{value:!1,label:"Manual only",hint:"run from the Actions tab (saves CI minutes)"},{value:!0,label:"Automatic",hint:"release on every CI success on main"}],initialValue:!1});return S(c),c})():!1,I=e?.ai??await(async()=>{n=!0;let c=await g.confirm({message:"Add AI features? (chat, models, schedules, integrations - and unlocks the companion + MCP server)",initialValue:!1});return S(c),c})(),T=I?e?.rag??await(async()=>{n=!0;let c=await g.confirm({message:"Add a server-side knowledge base (keyword search over your knowledge/ docs)?",initialValue:!1});return S(c),c})():!1,Se=I?e?.companion??await(async()=>{n=!0;let c=await g.confirm({message:"Add the companion daemon? A small program your users install on their own machine or VPS to run their Claude Code / Codex / OpenCode subscription for this app 24/7 - the AI runs on their hardware, not yours.",initialValue:!1});return S(c),c})():!1,Rn=I?e?.mcpServer??await(async()=>{n=!0;let c=await g.confirm({message:"Add the outward MCP server? Lets external agents (Claude Code, Codex, Hermes, OpenClaw) control the app on a user's behalf over an authenticated MCP endpoint.",initialValue:!1});return S(c),c})():!1,_n=I?e?.aiByok??await(async()=>{n=!0;let c=await g.confirm({message:"AI BYOK mode? (end-users bring their own provider key; no = operator-keyed, credit-metered)",initialValue:!0});return S(c),c})():!0,On=e?.revenueSharing??await(async()=>{n=!0;let c=await g.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return S(c),c})(),xn=A==="none"?!1:e?.credits??await(async()=>{n=!0;let c=await g.confirm({message:"Enable credits? (metered usage on top of subscription plans)",initialValue:!0});return S(c),c})(),ut=e?.socialProviders??await(async()=>{n=!0;let c=Fe.map(k=>({value:k,label:ce[k].label,hint:`requires ${ce[k].envVars.map(G=>G.name).join(" / ")}`})),u=await g.multiselect({message:"Which social login providers should the sign-in screen show?",options:c,initialValues:[],required:!1});return S(u),u})();g.log.info(h.bold("Tooling"));let Kt=e?.dockerServices??await(async()=>{n=!0;let c=[...Me].filter(H=>H!=="mailpit");V==="smtp"&&c.push("mailpit");let u=c.map(H=>({value:H,label:Le[H].label,hint:Le[H].hint})),k=u.map(H=>H.value).filter(H=>!(H==="postgres"&&(w==="neon"||w==="supabase")||H==="redis"&&b==="upstash")),G=await g.multiselect({message:"Which services should we set up in Docker for you?",options:u,initialValues:k,required:!1});return S(G),G})(),Gt=e?.aiTools??await(async()=>{n=!0;let c=Ve.map(k=>({value:k,label:rt[k].label})),u=await g.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return S(u),u})(),Ht=e?.demo,mt=Jt({databaseProvider:w,cacheProvider:b,paymentProvider:A,emailProvider:V,socialProviders:ut,demo:Ht}),et={};if(mt.length>0&&n){g.log.info(h.bold("Credentials")+h.dim(" all optional - press Enter to skip, fill in .env later"));for(let c of mt)if(n=!0,c.secret){let u=await g.password({message:c.message,mask:"*"});S(u),typeof u=="string"&&u.trim()&&(et[c.key]=u.trim())}else{let u=await g.text({message:c.message,placeholder:c.placeholder});S(u),typeof u=="string"&&u.trim()&&(et[c.key]=u.trim())}}if(n){let c=[` Name: ${h.cyan(r)}`,` App name: ${h.cyan(i)}`,` Location: ${h.cyan(o)}`,` Frontend: ${h.cyan(tt[s].label)}`,` Architecture: ${h.cyan(nt[f].label)}`].join(`
4
+ `),u=[` Deploy target: ${h.cyan(re[a]?.label??"Node.js / Docker")}`,` Database: ${h.cyan(Y[w].label)}`,` Cache: ${h.cyan(ie[b].label)}`,Kt.length>0?` Docker: ${h.cyan(Kt.map(Ee=>Le[Ee].label).join(", "))}`:` Docker: ${h.dim("none")}`].filter(Boolean).join(`
5
+ `),k=[A!=="none"?` Payment: ${h.cyan(gt[A].label)} (${J})`:` Payment: ${h.dim("none")}`,` Credits: ${xn?h.cyan("Yes"):h.dim("No")}`,` AI features: ${I?h.cyan("Yes"):h.dim("No")}`,...I?[` AI mode: ${h.cyan(_n?"BYOK":"Operator-keyed (credits)")}`,` RAG knowledge: ${T?h.cyan("Yes"):h.dim("No")}`,` Companion: ${Se?h.cyan("Yes"):h.dim("No")}`,` MCP server: ${Rn?h.cyan("Yes"):h.dim("No")}`]:[],` Email: ${h.cyan(ht[V].label)}`,` Multi-tenancy: ${R?h.cyan("Yes")+` (billing: ${yt[ae].label})`:h.dim("No")}`,` Blog: ${B?h.cyan("Yes"):h.dim("No")}`,` Docs app: ${v?h.cyan("Yes"):h.dim("No")}`,` Desktop app: ${_?h.cyan("Yes"):h.dim("No")}`,..._?[` Releases: ${h.cyan(z?"Automatic on CI":"Manual only")}`]:[],` Rev. sharing: ${On?h.cyan("Yes"):h.dim("No")}`,ut.length>0?` Social login: ${h.cyan(ut.map(Ee=>ce[Ee].label).join(", "))}`:` Social login: ${h.dim("none")}`,Gt.length>0?` AI tools: ${h.cyan(Gt.map(Ee=>rt[Ee].label).join(", "))}`:` AI tools: ${h.dim("none")}`].join(`
6
+ `),G=[h.bold("Project"),c,"",h.bold("Infrastructure"),u,"",h.bold("Features"),k];if(mt.length>0){let Ee=mt.map(Cn=>{let Di=et[Cn.key]?h.green("provided"):h.dim("skipped");return` ${Cn.key}: ${Di}`}).join(`
7
+ `);G.push("",h.bold("Credentials"),Ee)}g.note(G.join(`
8
+ `),"Summary");let H=await g.confirm({message:"Proceed with these settings?"});(g.isCancel(H)||!H)&&(g.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:i,projectDir:o,frontend:s,architecture:f,deploymentTarget:a,databaseProvider:w,cacheProvider:b,paymentProvider:A,emailProvider:V,multiTenancy:R,billingScope:ae,blog:B,docs:v,desktop:_,desktopAutoRelease:z,desktopAi:_?e?.desktopAi??!1:!1,ai:I,rag:T,companion:Se,mcpServer:Rn,aiByok:_n,revenueSharing:On,credits:xn,dockerServices:Kt,aiTools:Gt,socialProviders:ut,defaultCurrency:J,...Object.keys(et).length>0?{credentials:et}:{},...e?.baseUrl!==void 0?{baseUrl:e.baseUrl}:{},...Ht!==void 0?{demo:Ht}:{}}}import{createReadStream as Ki}from"fs";import{mkdir as Gi}from"fs/promises";import{Readable as Hi}from"stream";import{pipeline as qn}from"stream/promises";import{extract as zi}from"tar";import{join as Pe}from"path";import{homedir as Ni}from"os";var st=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",W=".generatesaas",he=Pe(W,"manifest.json"),Bn=Pe(W,"hashes.json"),wt=Pe(W,"template-hashes.json"),St=Pe(W,"template"),Fn=Pe(W,"staging"),Kn=Pe(W,"staging.json"),fe=Pe(Ni(),".generatesaas");var M=class extends Error{constructor(n,r,i){super(r);this.status=n;this.body=i}status;body;name="ApiError"};function ge(e){return{apiKey:e,baseUrl:st}}async function ye(e,t,n){let r=`${e.baseUrl}${t}`,i=await fetch(r,{...n,headers:{...n?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!i.ok){let o,s;try{s=await i.json(),o=s.error??`API ${i.status}: ${t}`}catch{o=`API ${i.status}: ${t}`}throw new M(i.status,o,s)}return i}import{existsSync as Li,readFileSync as $i,writeFileSync as ji,mkdirSync as Ui}from"fs";import{dirname as Mi}from"path";import*as ve from"@clack/prompts";function at(){if(!Li(fe))return null;try{let e=JSON.parse($i(fe,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&ve.log.warning(`Found old GitHub token in ${fe}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function Te(e){Ui(Mi(fe),{recursive:!0}),ji(fe,JSON.stringify({apiKey:e},null," ")+`
9
+ `,{mode:384})}async function Ke(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let n=at();if(n)return n;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return ct()}async function ct(){let e=await ve.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return ve.isCancel(e)&&(ve.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function be(e){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{latest:"0.0.0-ci",versions:[{version:"0.0.0-ci",date:new Date().toISOString(),breaking:!1}],entitlements:null}:await(await ye(e,"/versions")).json()}async function Wt(e,t){try{return await(await ye(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(n){if(n instanceof M&&n.status===404)return null;throw n}}async function Gn(e,t){return await(await ye(e,`/skill/${encodeURIComponent(t)}`)).json()}function Et(e){if(!(e instanceof M)||e.status!==403)return null;let t=e.body;return!t||t.code!=="update_window_expired"?null:{message:e.message,lastAllowedVersion:t.lastAllowedVersion??null}}function Hn(e){return{frontend:e.frontend,architecture:e.architecture,deployTarget:e.deploymentTarget,database:e.databaseProvider,cache:e.cacheProvider,payment:e.paymentProvider,email:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,credits:e.credits,revenueSharing:e.revenueSharing,socialProviders:e.socialProviders,aiTools:e.aiTools,currency:e.defaultCurrency}}async function Xt(e,t){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{token:"offline-test-token",licenseId:"offline-test-license-id",installId:t.installId}:await(await ye(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function zn(e,t){return await(await ye(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Zt(e,t){let n=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)});if(!n.ok)throw new Error(`Verification service returned ${n.status}`);return await n.json()}async function Yn(e,t,n){let r=await fetch(`${e}/license/inspect`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify(n)});if(!r.ok){let i=await r.json().catch(()=>null);throw new Error(i?.error??`Inspect endpoint returned ${r.status}`)}return await r.json()}var Qt=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".wrangler",".devcontainer","playwright-report","test-results"]),en=new Set(["pnpm-lock.yaml"]);function Ge(e){if(tn(e))return!0;for(let t of e.split("/"))if(en.has(t))return!0;return!1}var Vi=new Set(["data","mksaas","references","scripts",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","README.md","TODO.md","OVERVIEW.md"]),Bi=["scripts/knowledge-corpus.ts","scripts/knowledge-corpus.test.ts","scripts/knowledge-lint.ts","scripts/knowledge-build.ts","scripts/dev-ai-setup.ts","scripts/docs-lint.ts"],Fi=["docs/superpowers","packages/cli","packages/cli-api","infra/docker-compose.yml",".claude/commands",".claude/skills/web-next-port",".claude/skills/web-next-port-workspace",".claude/settings.local.json",".claude/worktrees"];function tn(e){let t=e.split("/");for(let n of t)if(Qt.has(n))return!0;if(Bi.includes(e))return!1;if(Vi.has(t[0]))return!0;for(let n of Fi)if(e===n||e.startsWith(n+"/"))return!0;return!1}async function At(e,t,n){await Gi(n,{recursive:!0});let r=process.env.GENERATESAAS_TEMPLATE_TARBALL;if(r){await qn(Ki(r),Jn(n));return}let i=await ye(e,`/template/${encodeURIComponent(t)}`);if(!i.body)throw new Error("Empty response body");let o=Hi.fromWeb(i.body);await qn(o,Jn(n))}function Jn(e){return zi({cwd:e,strip:1,filter:t=>{let n=t.replace(/^[^/]+\//,"");return n?!tn(n):!0},sync:!1})}import{access as Yi,readdir as qi,readFile as It,rm as nn,writeFile as Pt}from"fs/promises";import{join as ke}from"path";var Ji=["apps/web-nuxt/public/images/blog","apps/web-next/public/images/blog","packages/content/en/blog","packages/content/ro/blog"];async function Zn(e){await Promise.all(Ji.map(t=>nn(ke(e,t),{recursive:!0,force:!0})))}var Wi="packages/config/src/blog.ts";async function Qn(e){let t=ke(e,Wi),n=await It(t,"utf-8"),r=Wn(Wn(n,"blogCategories",t),"blogAuthors",t);await Pt(t,r)}function Wn(e,t,n){let r=new RegExp(`(export const ${t}\\b[^=]*=\\s*)\\[[\\s\\S]*?\\];`);if(!r.test(e))throw new Error(`emptyBlogConfig: could not find the \`export const ${t} = [...]\` declaration in ${n}. The boilerplate blog config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);return e.replace(r,"$1[];")}async function er(e){let t=ke(e,"packages/i18n/translations"),n;try{n=await qi(t)}catch{return}for(let r of n){let i=ke(t,r,"web.json"),o;try{o=await It(i,"utf-8")}catch{continue}let s=JSON.parse(o);!s.blog||s.blog.categories===void 0||(s.blog.categories={},await Pt(i,JSON.stringify(s,null," ")+`
10
+ `))}}var Xi="packages/config/src/ai/tasks.ts";async function tr(e){let t=ke(e,Xi),n=await It(t,"utf-8"),r=n.replace(/\n?[\t ]*\/\/ gsaas:demo-ai-task-start[\s\S]*?\/\/ gsaas:demo-ai-task-end/,"");if(r===n)throw new Error(`removeDemoAiTasks: could not find the \`gsaas:demo-ai-task\` markers in ${t}. The boilerplate AI tasks config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);await Pt(t,r)}var Xn="apps/tauri/resources/ai-skills/example-skill";async function nr(e){let t=ke(e,Xn);try{await Yi(t)}catch{throw new Error(`removeExampleSkill: expected the demo skill at ${Xn}, but it was missing (boilerplate drift). The desktop AI layer is kept for this build, so the skill must exist.`)}await nn(t,{recursive:!0})}async function rr(e,t){t.includes("claude-code")||await nn(ke(e,".claude"),{recursive:!0,force:!0})}async function ir(e,t){let n=ke(e,".claude","settings.json"),r;try{r=await It(n,"utf8")}catch{return}let i=JSON.parse(r);delete i.alwaysThinkingEnabled,delete i.enableAllProjectMcpServers,i.env&&(delete i.env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS,Object.keys(i.env).length===0&&delete i.env),i.permissions?.allow&&(i.permissions.allow=i.permissions.allow.filter(o=>Zi(o,t))),await Pt(n,JSON.stringify(i,null," ")+`
11
+ `)}function Zi(e,t){return!(e.startsWith("mcp__")||t!=="nuxt"&&e.includes("nuxt"))}import{join as or}from"path";import{mkdir as Qi,readdir as eo,rm as to,rmdir as no,writeFile as ro}from"fs/promises";import{dirname as Tt,join as io,relative as oo,sep as so}from"path";function Re(e){return e.split(so).join("/")}async function Rt(e){await Qi(e,{recursive:!0})}async function l(e,t){await Rt(Tt(e)),await ro(e,t,"utf-8")}async function rn(e,t){await to(e,{force:!0});let n=Tt(e);for(;n!==t&&n!==Tt(n);){try{await no(n)}catch{return}n=Tt(n)}}async function _e(e,t,n){let r=[],i=await eo(e,{withFileTypes:!0});for(let o of i){let s=io(e,o.name),a=Re(oo(t,s));n(a)||(o.isDirectory()?r.push(...await _e(s,t,n)):o.isFile()&&r.push(s))}return r}var ao={postgres:"Postgres",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"},co={resend:"Resend",ses:"Amazon SES",smtp:"SMTP"},lo={redis:"Redis",upstash:"Upstash Redis"},po={node:"Node.js / Docker",vercel:"Vercel"},uo={stripe:"Stripe",polar:"Polar"};function mo(e){let t=e.frontend==="nuxt",n=t?"Nuxt 4":"Next.js 16",r=t?"apps/web-nuxt":"apps/web-next",i=t?"`app/` pages + components + composables":"`app/` routes, `components/`, `lib/`",o=e.architecture==="fullstack",s=o?"(fullstack - Hono API mounted inside the app)":"(separate - standalone Hono backend)",a=o?`Mounted inside \`${r}\`. A standalone \`apps/backend\` is also kept (inert) so you can switch to separate later.`:"Runs from `apps/backend`; the frontend reaches it over HTTP.",d=lo[e.cacheProvider],m=po[e.deploymentTarget],p=e.paymentProvider==="none"?"":`
12
+ - **Payments:** ${uo[e.paymentProvider]}`,f=e.desktop?", and the desktop app (built with Tauri) under `docs/desktop/`":"",w=t?"`$t('key')` in templates (global helper); `useI18n()` from `vue-i18n` in `<script setup>` for `locale`/`setLocale`/`t()`.":"`useTranslations()` from `next-intl` in components; messages are loaded in `apps/web-next/i18n/request.ts`.",b=t?"**Navigation:** always use `localePath()` for paths (hardcoded paths break non-default locales); `await navigateTo()` in SSR.":"**Navigation:** `next/link` for links; `redirect()` from `next/navigation` for programmatic redirects in Server Components.";return`# AGENTS.md
13
13
 
14
14
  Guidelines for AI coding agents (Claude Code, Codex, Cursor, \u2026) in this project.
15
15
  Keep this file tight: add a rule only when it prevents a recurring mistake - too
@@ -35,13 +35,13 @@ flag, route, or translation is the most common and most costly mistake in this r
35
35
 
36
36
  ## Stack
37
37
 
38
- - **Frontend:** ${n} ${a}
39
- - **API:** Hono, RPC-typed. ${s}
40
- - **Database:** Drizzle ORM + ${ri[e.databaseProvider]}
41
- - **Cache + jobs:** ${p} + Inngest
42
- - **Auth:** Better Auth${m}
43
- - **Email:** ${oi[e.emailProvider]}
44
- - **Deploy:** ${f}
38
+ - **Frontend:** ${n} ${s}
39
+ - **API:** Hono, RPC-typed. ${a}
40
+ - **Database:** Drizzle ORM + ${ao[e.databaseProvider]}
41
+ - **Cache + jobs:** ${d} + Inngest
42
+ - **Auth:** Better Auth${p}
43
+ - **Email:** ${co[e.emailProvider]}
44
+ - **Deploy:** ${m}
45
45
 
46
46
  ## Where things live (extend these - don't reinvent)
47
47
 
@@ -51,12 +51,12 @@ flag, route, or translation is the most common and most costly mistake in this r
51
51
  - \`packages/auth/src/config.ts\` - Better Auth config.
52
52
  - \`packages/runtime/src/env.ts\` - the validated (Zod) env schema. New env var \u2192 add it here **and** to \`.env.example\` (the committed reference); set the local value in \`.env\`.
53
53
  - \`packages/{payments,mail,sms,storage,notifications}\` - config-gated integrations. Every provider's files stay even when its feature is off, so flipping a flag is enough to enable it.
54
- - \`${r}\` - the ${n} app (${o}).
55
- - \`docs/${t?"nuxt":"next"}/\` - feature & architecture documentation for this stack (Markdown). Consult it before searching from scratch; it cites real config keys, package names, and file paths you can act on. The GenerateSaaS CLI lives under \`docs/cli/\`${d}.
54
+ - \`${r}\` - the ${n} app (${i}).
55
+ - \`docs/${t?"nuxt":"next"}/\` - feature & architecture documentation for this stack (Markdown). Consult it before searching from scratch; it cites real config keys, package names, and file paths you can act on. The GenerateSaaS CLI lives under \`docs/cli/\`${f}.
56
56
 
57
57
  ## Knowledge
58
58
 
59
- \`knowledge/\` is the product knowledge that grounds the AI: read-only markdown entries, confidential, never user-facing - injected into the model's context so it answers from your facts. When you add or maintain an entry, FOLLOW THE RULES in \`knowledge/AGENTS.md\` (one concept per entry, frontmatter, \`[[wikilinks]]\`) and run \`pnpm knowledge:lint\` to validate. \`pnpm knowledge:build\` seeds the web search index (gated by \`config.rag.enabled\`); the desktop app self-indexes its bundled copy. See \`docs/${t?"nuxt":"next"}/knowledge.mdx\`.
59
+ \`knowledge/\` is the product knowledge that grounds the AI: read-only markdown entries, confidential, never user-facing - injected into the model's context so it answers from your facts. When you add or maintain an entry, FOLLOW THE RULES in \`knowledge/AGENTS.md\` (one concept per entry, frontmatter, \`[[wikilinks]]\`) and run \`pnpm knowledge:lint\` to validate. \`pnpm knowledge:build\` seeds the web knowledge base (gated by \`config.rag.enabled\`); the desktop app self-indexes its bundled copy. See \`docs/${t?"nuxt":"next"}/knowledge.mdx\`.
60
60
 
61
61
  ## Code style
62
62
 
@@ -73,7 +73,7 @@ flag, route, or translation is the most common and most costly mistake in this r
73
73
 
74
74
  - **Hono routes:** keep the method chain (\`.get().post()\`) - RPC type inference depends on it. Validate with \`sValidator\` from \`@hono/standard-validator\`.
75
75
  - **Feature flags:** respect \`config.*\` - hide/skip a feature when its flag is off (the files stay so you can flip it later).
76
- - **i18n:** strings live in \`packages/i18n/translations/{locale}/{scope}.json\`; edit \`en/\` only, keep keys generic. ${v} A pre-commit hook runs \`pnpm translate\` (needs \`OPENROUTER_API_KEY\`) to sync other locales from \`en\`; without the key it skips.
76
+ - **i18n:** strings live in \`packages/i18n/translations/{locale}/{scope}.json\`; edit \`en/\` only, keep keys generic. ${w} A pre-commit hook runs \`pnpm translate\` (needs \`OPENROUTER_API_KEY\`) to sync other locales from \`en\`; without the key it skips.
77
77
  - ${b}
78
78
  - **Routes:** use \`config.routes.*\`, never hardcoded path strings.
79
79
  - **Secrets:** never send them to an external service; generate tokens/QR codes client-side.
@@ -85,23 +85,23 @@ In \`@repo/*\` backend packages prefer web-standard APIs: \`crypto.randomUUID()\
85
85
  ## This project
86
86
 
87
87
  Scaffolded from the GenerateSaaS boilerplate. To pull upstream boilerplate updates, ask your agent to **"update my GenerateSaaS project"**. To remove the license heartbeat + manifest: \`pnpm dlx generatesaas eject\`.
88
- `}async function nr(e){await l(tr(e.projectDir,"AGENTS.md"),ci(e)),await l(tr(e.projectDir,"CLAUDE.md"),`@AGENTS.md
89
- `)}import{join as li}from"path";var pi={postgres:"Postgres (self-hosted)",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"};function di(e){let t=e.appName.trim()||e.projectName,n=e.frontend==="nuxt",r=n?"Nuxt 4":"Next.js 16",o=n?"apps/web-nuxt":"apps/web-next",i=pi[e.databaseProvider],a=vt(e),s=e.architecture==="fullstack"?`${r} app at \`${o}/\` with the Hono API mounted inside it. A standalone \`apps/backend/\` is also included (inert in this fullstack setup) so you can split the API into a separate service later without re-scaffolding.`:`${r} app at \`${o}/\` and a separate Hono backend at \`apps/backend/\`.`,p=e.architecture==="fullstack"?`- App + API: http://localhost:3000
88
+ `}async function sr(e){await l(or(e.projectDir,"AGENTS.md"),mo(e)),await l(or(e.projectDir,"CLAUDE.md"),`@AGENTS.md
89
+ `)}import{join as fo}from"path";var go={postgres:"Postgres (self-hosted)",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"};function ho(e){let t=e.appName.trim()||e.projectName,n=e.frontend==="nuxt",r=n?"Nuxt 4":"Next.js 16",i=n?"apps/web-nuxt":"apps/web-next",o=go[e.databaseProvider],s=vt(e),a=e.architecture==="fullstack"?`${r} app at \`${i}/\` with the Hono API mounted inside it. A standalone \`apps/backend/\` is also included (inert in this fullstack setup) so you can split the API into a separate service later without re-scaffolding.`:`${r} app at \`${i}/\` and a separate Hono backend at \`apps/backend/\`.`,d=e.architecture==="fullstack"?`- App + API: http://localhost:3000
90
90
  - Inngest dev server: http://127.0.0.1:8288`:`- App: http://localhost:3000
91
91
  - API: http://localhost:3010
92
- - Inngest dev server: http://127.0.0.1:8288`,f=a?`pnpm infra # optional: starts local Docker services (Postgres / Redis / Inngest / Mailpit)
93
- `:"",m=e.deploymentTarget==="vercel"?"### Deployment\n\nDeploy to Vercel: `vercel deploy` (or connect the repo in the Vercel dashboard). Required environment variables are listed in `.env`.":`### Deployment
92
+ - Inngest dev server: http://127.0.0.1:8288`,m=s?`pnpm infra # optional: starts local Docker services (Postgres / Redis / Inngest / Mailpit)
93
+ `:"",p=e.deploymentTarget==="vercel"?"### Deployment\n\nDeploy to Vercel: `vercel deploy` (or connect the repo in the Vercel dashboard). Required environment variables are listed in `.env`.":`### Deployment
94
94
 
95
- This project ships with Dockerfiles for each app. Build images with \`docker build\` and deploy to your runtime of choice (Render / Fly.io / Railway / Coolify / Dokploy / your own VPS).${a?"\n\nThe `infra/` directory ships a Docker Compose file for the local-only services (Postgres / Redis / Inngest / Mailpit, filtered by your provider choices).":""}`,d=e.aiTools.length>0?"To pull the latest boilerplate changes into this project, open it in your AI coding agent and ask: `update my GenerateSaaS project`.":"To pull the latest boilerplate changes into this project, install an AI coding agent (Claude Code / Cursor / Codex / Gemini CLI / Windsurf) and ask: `update my GenerateSaaS project`. The skill bundle that drives the update lives under each tool's skill root.";return`# ${t}
95
+ This project ships with Dockerfiles for each app. Build images with \`docker build\` and deploy to your runtime of choice (Render / Fly.io / Railway / Coolify / Dokploy / your own VPS).${s?"\n\nThe `infra/` directory ships a Docker Compose file for the local-only services (Postgres / Redis / Inngest / Mailpit, filtered by your provider choices).":""}`,f=e.aiTools.length>0?"To pull the latest boilerplate changes into this project, open it in your AI coding agent and ask: `update my GenerateSaaS project`.":"To pull the latest boilerplate changes into this project, install an AI coding agent (Claude Code / Cursor / Codex / Gemini CLI / Windsurf) and ask: `update my GenerateSaaS project`. The skill bundle that drives the update lives under each tool's skill root.";return`# ${t}
96
96
 
97
- ${s}
97
+ ${a}
98
98
 
99
99
  ## Stack
100
100
 
101
101
  - **Frontend:** ${r}
102
102
  - **Backend:** Hono (TypeScript, RPC-typed)
103
103
  - **Auth:** Better Auth
104
- - **ORM / DB:** Drizzle + ${i}
104
+ - **ORM / DB:** Drizzle + ${o}
105
105
  - **Background jobs:** Inngest
106
106
  - **i18n:** ${n?"@nuxtjs/i18n":"next-intl"}
107
107
 
@@ -112,11 +112,11 @@ pnpm install
112
112
  # A ready-to-run \`.env\` was generated for you - open it and fill in the
113
113
  # values marked \`# TODO\` (provider API keys). \`.env.example\` is the committed
114
114
  # reference. All apps load the single root \`.env\`.
115
- ${f}pnpm db:setup # first run: enable pgvector + create the schema (idempotent)
115
+ ${m}pnpm db:setup # first run: create the database schema (idempotent)
116
116
  pnpm dev
117
117
  \`\`\`
118
118
 
119
- ${p}
119
+ ${d}
120
120
 
121
121
  ## Build your SaaS
122
122
 
@@ -129,14 +129,14 @@ App-level configuration lives in \`packages/config/src/index.ts\`. Translation s
129
129
  ## Database
130
130
 
131
131
  \`\`\`bash
132
- pnpm db:setup # enable pgvector + push schema + knowledge indexes (idempotent)
133
- pnpm -F @repo/database push # push schema changes only (once pgvector exists)
132
+ pnpm db:setup # apply the database schema (idempotent)
133
+ pnpm -F @repo/database push # push schema changes only
134
134
  pnpm -F @repo/database migrate # run migrations
135
135
  pnpm -F @repo/database studio # open Drizzle Studio
136
136
  pnpm auth:generate # regenerate Better Auth schema after config changes
137
137
  \`\`\`
138
138
 
139
- ${m}
139
+ ${p}
140
140
 
141
141
  ## Removing the GenerateSaaS license
142
142
 
@@ -148,12 +148,13 @@ pnpm dlx generatesaas eject
148
148
 
149
149
  ## Updates
150
150
 
151
- ${d}
152
- `}async function rr(e){await l(li(e.projectDir,"README.md"),di(e))}import{join as Tt}from"path";function ui(e){let t=e.split(".");return t.length>=3?t.slice(1).join("."):e}function mi(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")||"app"}function fi(e,t){let n=mi(e);return{appId:`${t.split(".").reverse().join(".")}.${n.replace(/-/g,"")}`,productName:e,protocol:n}}async function or(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),n=e.paymentProvider!=="none",r=e.baseUrl??"http://localhost:3000",o=e.baseUrl?new URL(e.baseUrl).hostname:"example.com",i=ui(o),a=e.demo?"false":"true",s=e.demo?`
151
+ ${f}
152
+ `}async function ar(e){await l(fo(e.projectDir,"README.md"),ho(e))}import{readFile as yo}from"fs/promises";import{join as _t}from"path";var on="https://generatesaas.com";async function vo(e,t){let n=_t(e,"apps/tauri/src-tauri/tauri.conf.json"),r=JSON.parse(await yo(n,"utf8")),i=r.app?.security?.csp;if(typeof i!="string"||!i.includes(on))throw new Error(`Cannot neutralize ${n}: the upstream origin "${on}" was not found in app.security.csp. The boilerplate config may have drifted.`);if(r.app.security.csp=i.split(on).join(t),!r.bundle?.macOS||!("signingIdentity"in r.bundle.macOS))throw new Error(`Cannot neutralize ${n}: expected bundle.macOS.signingIdentity to remove. The boilerplate config may have drifted.`);delete r.bundle.macOS.signingIdentity,await l(n,JSON.stringify(r,null,2)+`
153
+ `)}function bo(e){let t=e.split(".");return t.length>=3?t.slice(1).join("."):e}function ko(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")||"app"}function wo(e,t){let n=ko(e);return{appId:`${t.split(".").reverse().join(".")}.${n.replace(/-/g,"")}`,productName:e,protocol:n}}async function cr(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),n=e.paymentProvider!=="none",r=e.baseUrl??"http://localhost:3000",i=e.baseUrl?new URL(e.baseUrl).hostname:"example.com",o=bo(i),s=e.demo?"false":"true",a=e.demo?`
153
154
  support: {
154
155
  enableInDev: true,
155
156
  crisp: { websiteId: "7e221cec-ed61-46b7-b1b4-8cbc16557cca" }
156
- },`:"",p=e.frontend==="nextjs"&&e.architecture==="fullstack"?"false":"true",f=fi(t,i),m=`{ enabled: ${e.rag} }`,d=e.companion?'{ enabled: true, clientId: "companion" }':'{ enabled: false, clientId: "companion" }',v=`{ enabled: ${e.mcpServer} }`,b=`import type { AppConfig } from "@repo/config/types";
157
+ },`:"",d=e.frontend==="nextjs"&&e.architecture==="fullstack"?"false":"true",m=wo(t,o),p=`{ enabled: ${e.rag} }`,f=e.companion?'{ enabled: true, clientId: "companion" }':'{ enabled: false, clientId: "companion" }',w=`{ enabled: ${e.mcpServer} }`,b=`import type { AppConfig } from "@repo/config/types";
157
158
  import { desktopConfig } from "./desktop.mjs";
158
159
  import { tenancyConfig } from "./tenancy-flags.mjs";
159
160
 
@@ -162,9 +163,9 @@ const trustedOrigins = process.env.TRUSTED_ORIGINS?.split(",").map((s) => s.trim
162
163
  export const config: AppConfig = {
163
164
  siteName: "${t}",
164
165
  fullSiteName: "${t}",
165
- domain: "${o}",
166
+ domain: "${i}",
166
167
  baseUrl: process.env.BASE_URL ?? "${r}",
167
- indexable: ${a},
168
+ indexable: ${s},
168
169
  logo: {
169
170
  main: "/images/logo.svg",
170
171
  square: "/images/logo-square.svg"
@@ -189,16 +190,16 @@ export const config: AppConfig = {
189
190
  limitPerSecond: 3,
190
191
  senders: {
191
192
  transactional: {
192
- email: "noreply@${i}",
193
+ email: "noreply@${o}",
193
194
  senderName: "${t}"
194
195
  },
195
196
  marketing: {
196
- email: "hello@${i}",
197
+ email: "hello@${o}",
197
198
  senderName: "${t}",
198
199
  signatureName: "Alex"
199
200
  },
200
201
  support: {
201
- email: "support@${i}",
202
+ email: "support@${o}",
202
203
  senderName: "${t} Support"
203
204
  }
204
205
  },
@@ -222,7 +223,7 @@ export const config: AppConfig = {
222
223
  prefix: "key_"
223
224
  },
224
225
  apiDocs: true,
225
- performanceMonitor: { enabled: ${p} },
226
+ performanceMonitor: { enabled: ${d} },
226
227
  notifications: {
227
228
  enabled: true,
228
229
  maxPerUser: 100,
@@ -240,7 +241,7 @@ export const config: AppConfig = {
240
241
  enabled: true,
241
242
  provider: "turnstile",
242
243
  siteKey: "0x4AAAAAACJo9y9FxH8lqkGu"
243
- }`:"{ enabled: false }"},${s}
244
+ }`:"{ enabled: false }"},${a}
244
245
  currency: ${e.demo?`{
245
246
  // Demo mirrors the boilerplate's showcase config so geo\u2192currency
246
247
  // switching can be demonstrated. Real users get a single-currency
@@ -260,7 +261,7 @@ export const config: AppConfig = {
260
261
  }`:`{
261
262
  base: "${e.defaultCurrency}",
262
263
  list: [
263
- { symbol: "${Se[e.defaultCurrency].symbol}", name: "${Se[e.defaultCurrency].name}", code: "${e.defaultCurrency}", place: "${Se[e.defaultCurrency].place}", space: ${Se[e.defaultCurrency].space} }
264
+ { symbol: "${Ae[e.defaultCurrency].symbol}", name: "${Ae[e.defaultCurrency].name}", code: "${e.defaultCurrency}", place: "${Ae[e.defaultCurrency].place}", space: ${Ae[e.defaultCurrency].space} }
264
265
  ],
265
266
  countryMap: {
266
267
  default: "${e.defaultCurrency}"
@@ -305,12 +306,12 @@ export const config: AppConfig = {
305
306
  userSchedules: true
306
307
  },
307
308
  desktop: desktopConfig,
308
- // Server-side RAG (pgvector knowledge with embeddings + semantic search). Off by default.
309
- rag: ${m},
309
+ // Server-side keyword knowledge base over your knowledge/ docs. Off by default.
310
+ rag: ${p},
310
311
  // Companion daemon (apps/companion): drives the user's subscription CLIs for this app. Off by default.
311
- companion: ${d},
312
+ companion: ${f},
312
313
  // Outward MCP server exposing the capability layer to external agents. Off by default.
313
- mcpServer: ${v},
314
+ mcpServer: ${w},
314
315
  seo: {
315
316
  description: "Production-ready SaaS application",
316
317
  foundingDate: "${new Date().getFullYear()}-01-01"
@@ -343,27 +344,29 @@ export * from "./pricing";
343
344
  export * from "./roles";
344
345
  export * from "./section-tabs";
345
346
  export * from "./tenancy";
346
- `,I=Tt(e.projectDir,"packages/config/src/index.ts");await l(I,b),await l(Tt(e.projectDir,"packages/config/src/desktop.mjs"),`// Plain-JS desktop app identity. NO env reads, so tooling that cannot import the
347
- // TypeScript config index reads it directly: the Electron renderer + main process
348
- // (electron-vite bundles @repo/config/desktop) and electron-builder (Node ESM).
349
- // Edit these values once to rebrand - they are the same in dev and production, so
350
- // they live in committed config, not env. The config index re-exports this as
351
- // config.desktop.
347
+ `,A=_t(e.projectDir,"packages/config/src/index.ts");await l(A,b),await l(_t(e.projectDir,"packages/config/src/desktop.mjs"),`// Plain-JS desktop app identity. NO env reads, so tooling that cannot import the
348
+ // TypeScript config index reads it directly: the Tauri renderer, the apps/tauri
349
+ // sidecar engine, the Tauri identity sync (apps/tauri/scripts/sync-identity.mjs)
350
+ // and the release scripts. Edit these values once to rebrand - they are the same
351
+ // in dev and production, so they live in committed config, not env. The config
352
+ // index re-exports this as config.desktop.
352
353
 
353
354
  export const desktopConfig = {
354
355
  enabled: ${e.desktop},
355
- appId: "${f.appId}",
356
- productName: "${f.productName}",
357
- protocol: "${f.protocol}",
356
+ appId: "${m.appId}",
357
+ productName: "${m.productName}",
358
+ protocol: "${m.protocol}",
358
359
  baseUrl: "${r}",
359
360
  // Name of the app's data folder (created under the OS app-data dir). Where the app
360
361
  // and its AI agents persist files - logs, gathered data, generated artifacts. Rename
361
362
  // it freely; it is a plain folder name, not a path.
362
363
  dataFolder: "data",
363
- autoUpdate: { provider: "generic", url: "https://cdn.${i}/desktop" },
364
+ // Public base URL the release workflow uploads to; the Tauri updater polls
365
+ // \`<url>/latest.json\` and the stable installer download links live under it.
366
+ autoUpdate: { url: "https://cdn.${o}/tauri" },
364
367
  agents: {
365
- // Feature toggles only. Agents (their structure + prompts) live in the desktop
366
- // app at apps/desktop/src/main/ai/agents/ - typed TypeScript wiring next to
368
+ // Feature toggles only. Agents live in the apps/tauri sidecar engine, registered
369
+ // through the @repo/agent-runtime registry - typed TypeScript wiring next to the
367
370
  // markdown prompt files you tune.
368
371
  enabled: ${e.desktopAi},
369
372
  modelRegistry: { enabled: true },
@@ -383,8 +386,8 @@ export const desktopConfig = {
383
386
  maxChatsPerAgent: 20
384
387
  }
385
388
  };
386
- `),await l(Tt(e.projectDir,"packages/config/src/tenancy-flags.mjs"),`// Plain-JS tenancy flags. NO env reads, so tooling that cannot import the
387
- // TypeScript config index reads it directly (the Electron renderer). Mirrors the
389
+ `),await l(_t(e.projectDir,"packages/config/src/tenancy-flags.mjs"),`// Plain-JS tenancy flags. NO env reads, so tooling that cannot import the
390
+ // TypeScript config index reads it directly (the Tauri renderer). Mirrors the
388
391
  // desktop.mjs pattern. The config index re-exports this as config.tenancy.
389
392
 
390
393
  export const tenancyConfig = ${e.multiTenancy?`{
@@ -392,11 +395,8 @@ export const tenancyConfig = ${e.multiTenancy?`{
392
395
  organizationLimit: 5,
393
396
  billingScope: "${e.billingScope}"
394
397
  }`:"{ multiTenant: false }"};
395
- `),e.desktop&&await l(Tt(e.projectDir,"apps/desktop/dev-app-update.yml"),`provider: generic
396
- url: https://cdn.${i}/desktop
397
- updaterCacheDirName: ${f.protocol}-updater
398
- `)}import{join as gi}from"path";function hi(e){return e==="stripe"?' stripePriceId: "",':' polarProductId: "",'}function rn(e){let t=[];return e.withCredits&&(t.push(` credits: ${e.credits},`),t.push(" creditInterval: 30,")),t.push(` apiRateLimit: { maxRequests: ${e.rateLimit} }`),t.join(`
399
- `)}async function ir(e){let t=gi(e.projectDir,"packages/config/src/pricing.ts"),n=e.defaultCurrency;if(e.paymentProvider==="none"){let d=`import type { PricingConfig } from "@repo/config/types";
398
+ `),e.desktop&&await vo(e.projectDir,new URL(r).origin)}import{join as So}from"path";function Eo(e){return e==="stripe"?' stripePriceId: "",':' polarProductId: "",'}function sn(e){let t=[];return e.withCredits&&(t.push(` credits: ${e.credits},`),t.push(" creditInterval: 30,")),t.push(` apiRateLimit: { maxRequests: ${e.rateLimit} }`),t.join(`
399
+ `)}async function lr(e){let t=So(e.projectDir,"packages/config/src/pricing.ts"),n=e.defaultCurrency;if(e.paymentProvider==="none"){let f=`import type { PricingConfig } from "@repo/config/types";
400
400
 
401
401
  export const pricingConfig: PricingConfig = {
402
402
  defaultPlan: "free",
@@ -425,7 +425,7 @@ export const pricingConfig: PricingConfig = {
425
425
  credits: { enabled: false },
426
426
  products: { enabled: false, items: [] }
427
427
  };
428
- `;await l(t,d);return}let r=e.paymentProvider,o=hi(r),i=e.credits,a=rn({credits:5,rateLimit:100,withCredits:i}),s=rn({credits:10,rateLimit:1e3,withCredits:i}),p=rn({credits:50,rateLimit:5e3,withCredits:i}),m=`import type { PricingConfig } from "@repo/config/types";
428
+ `;await l(t,f);return}let r=e.paymentProvider,i=Eo(r),o=e.credits,s=sn({credits:5,rateLimit:100,withCredits:o}),a=sn({credits:10,rateLimit:1e3,withCredits:o}),d=sn({credits:50,rateLimit:5e3,withCredits:o}),p=`import type { PricingConfig } from "@repo/config/types";
429
429
 
430
430
  export const pricingConfig: PricingConfig = {
431
431
  defaultPlan: "free",
@@ -449,7 +449,7 @@ export const pricingConfig: PricingConfig = {
449
449
  amounts: { ${n}: 0 }
450
450
  }
451
451
  ],
452
- ${a}
452
+ ${s}
453
453
  },
454
454
  {
455
455
  id: "starter",
@@ -464,18 +464,18 @@ ${a}
464
464
  ],
465
465
  prices: [
466
466
  {
467
- ${o}
467
+ ${i}
468
468
  interval: "month",
469
469
  amounts: { ${n}: 9 }
470
470
  },
471
471
  {
472
- ${o}
472
+ ${i}
473
473
  interval: "year",
474
474
  amounts: { ${n}: 90 },
475
475
  anchorAmounts: { ${n}: 109 }
476
476
  }
477
477
  ],
478
- ${s}
478
+ ${a}
479
479
  },
480
480
  {
481
481
  id: "pro",
@@ -493,34 +493,34 @@ ${s}
493
493
  ],
494
494
  prices: [
495
495
  {
496
- ${o}
496
+ ${i}
497
497
  interval: "month",
498
498
  amounts: { ${n}: 29 },
499
499
  anchorAmounts: { ${n}: 39 },
500
500
  featured: true
501
501
  },
502
502
  {
503
- ${o}
503
+ ${i}
504
504
  interval: "year",
505
505
  amounts: { ${n}: 290 },
506
506
  anchorAmounts: { ${n}: 349 }
507
507
  }
508
508
  ],
509
- ${p}
509
+ ${d}
510
510
  }
511
511
  ],
512
- ${i?" credits: { enabled: true }":" credits: { enabled: false }"},
512
+ ${o?" credits: { enabled: true }":" credits: { enabled: false }"},
513
513
  products: {
514
514
  enabled: false,
515
515
  items: []
516
516
  }
517
517
  };
518
- `;await l(t,m)}var yi={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"},{key:"SMTP_USER"},{key:"SMTP_PASSWORD"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]};function vi(e){let t=se[e];return t.envVars.map((n,r)=>({key:n.name,...r===0?{comment:`# TODO: Add your ${t.label} OAuth credentials`}:{}}))}var ki={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function Ge(e,t){return t?e.map(n=>{let r=t[n.key];return r?{...n,defaultValue:r,comment:void 0}:n}):e}function He(e,t){for(let n of e)n.comment&&t.push(n.comment),n.defaultValue!==void 0?t.push(`${n.key}=${n.defaultValue}`):t.push(`#${n.key}=`)}function on(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function sr(e){return e.architecture==="fullstack"?{apiUrl:"http://localhost:3000/api",baseUrl:"http://localhost:3000"}:{apiUrl:"http://localhost:3010",baseUrl:"http://localhost:3000"}}function wi(e){let{architecture:t,deploymentTarget:n}=e;return t==="fullstack"?n==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://your-app.vercel.app"}:n==="node"?{frontend:"https://your-app.example.com",backend:"https://your-app.example.com"}:null:{frontend:"https://your-app.example.com",backend:"https://your-app.example.com/api"}}function Rt(e,t,n,r){e.push(r==="example"?`${t}=`:`${t}=${n}`)}function ar(e,t){let n=t==="example"?void 0:e.credentials,{apiUrl:r,baseUrl:o}=sr(e),i=[];e.architecture==="separate"?i.push("# API Configuration","# Standalone backend's own URL (the frontend reaches it via the public var above).",`API_URL=${r}`,`BASE_URL=${o}`):i.push("# App","# (API_URL is derived from the frontend's *_PUBLIC_API_URL by the runtime env schema.)",`BASE_URL=${o}`),i.push("","# Database"),He(Ge(G[e.databaseProvider].envVars,n),i),i.push("","# Cache"),He(Ge(re[e.cacheProvider].envVars,n),i),i.push("","# Authentication"),t==="example"&&i.push("# Generate a strong secret, e.g. `openssl rand -hex 32`"),Rt(i,"BETTER_AUTH_SECRET",crypto.randomUUID(),t),i.push("","# Content API (random secret; required when contentApi feature is enabled in @repo/config)"),Rt(i,"CONTENT_API_KEY",on(32),t),i.push("","# Job Queue - Inngest","INNGEST_APP_ID=api"),Rt(i,"INNGEST_EVENT_KEY",on(32),t),Rt(i,"INNGEST_SIGNING_KEY",on(32),t),i.push("INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&(i.push("","# API Port (standalone backend)","API_PORT=3010"),i.push("","# CORS + cross-subdomain cookies (production only - leave unset for local dev)","# TRUSTED_ORIGINS=https://your-app.example.com","# AUTH_COOKIE_DOMAIN=.example.com"));let a=yi[e.emailProvider];if(a&&(i.push("","# Email"),He(Ge(a,n),i)),e.paymentProvider!=="none"){let s=ki[e.paymentProvider];s&&(i.push("","# Payment"),He(Ge(s,n),i))}if(e.socialProviders.length>0){i.push("","# Social auth");for(let s of e.socialProviders)He(Ge(vi(s),n),i)}return e.demo&&(i.push("","# Captcha (Cloudflare Turnstile)"),He(Ge([{key:"TURNSTILE_SECRET_KEY",comment:"# TODO: Add your Cloudflare Turnstile secret key"}],n),i)),i.push("","# Translations - OpenRouter (optional)","# Set to auto-translate en/* into your other locales with `pnpm translate`.","# The pre-commit hook runs it on commit; without a key it skips and untranslated","# locales fall back to the default locale. Get a key: https://openrouter.ai/keys","#OPENROUTER_API_KEY="),i.push("","# AI base - provider API keys (optional)","# Enable config.ai in packages/config and set the key for your chosen provider.","# OPENROUTER_API_KEY above also works as an AI provider key.","#ANTHROPIC_API_KEY=","#OPENAI_API_KEY="),i.push(""),i.join(`
519
- `)}function bi(e){let{apiUrl:t}=sr(e),n=e.frontend==="nextjs"?"NEXT_PUBLIC_API_URL":"NUXT_PUBLIC_API_URL",r=["# API Configuration",`${n}=${t}`],o=wi(e);return o&&e.architecture==="separate"&&r.push("","# Production (uncomment and replace with your deployed hostnames):",`# ${n}=${o.backend}`),r.push(""),r.join(`
520
- `)}async function cr(e){let t=bi(e);await l(`${e.projectDir}/.env`,t+`
521
- `+ar(e,"env")),await l(`${e.projectDir}/.env.example`,t+`
522
- `+ar(e,"example"))}import{join as Si}from"path";async function lr(e){let t=[...e.dockerServices];if(G[e.databaseProvider].managed&&(t=t.filter(i=>i!=="postgres")),re[e.cacheProvider].managed&&(t=t.filter(i=>i!=="redis")),t.length===0)return!1;let n=[],r=[];t.includes("postgres")&&(n.push(` postgres:
523
- image: pgvector/pgvector:pg18
518
+ `;await l(t,p)}var Ao={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"},{key:"SMTP_USER"},{key:"SMTP_PASSWORD"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]};function Io(e){let t=ce[e];return t.envVars.map((n,r)=>({key:n.name,...r===0?{comment:`# TODO: Add your ${t.label} OAuth credentials`}:{}}))}var Po={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function He(e,t){return t?e.map(n=>{let r=t[n.key];return r?{...n,defaultValue:r,comment:void 0}:n}):e}function ze(e,t){for(let n of e)n.comment&&t.push(n.comment),n.defaultValue!==void 0?t.push(`${n.key}=${n.defaultValue}`):t.push(`#${n.key}=`)}function an(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function dr(e){return e.architecture==="fullstack"?{apiUrl:"http://localhost:3000/api",baseUrl:"http://localhost:3000"}:{apiUrl:"http://localhost:3010",baseUrl:"http://localhost:3000"}}function To(e){let{architecture:t,deploymentTarget:n}=e;return t==="fullstack"?n==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://your-app.vercel.app"}:n==="node"?{frontend:"https://your-app.example.com",backend:"https://your-app.example.com"}:null:{frontend:"https://your-app.example.com",backend:"https://your-app.example.com/api"}}function Ot(e,t,n,r){e.push(r==="example"?`${t}=`:`${t}=${n}`)}function pr(e,t){let n=t==="example"?void 0:e.credentials,{apiUrl:r,baseUrl:i}=dr(e),o=[];e.architecture==="separate"?o.push("# API Configuration","# Standalone backend's own URL (the frontend reaches it via the public var above).",`API_URL=${r}`,`BASE_URL=${i}`):o.push("# App","# (API_URL is derived from the frontend's *_PUBLIC_API_URL by the runtime env schema.)",`BASE_URL=${i}`),o.push("","# Database"),ze(He(Y[e.databaseProvider].envVars,n),o),o.push("","# Cache"),ze(He(ie[e.cacheProvider].envVars,n),o),o.push("","# Authentication"),t==="example"&&o.push("# Generate a strong secret, e.g. `openssl rand -hex 32`"),Ot(o,"BETTER_AUTH_SECRET",crypto.randomUUID(),t),o.push("","# Content API (random secret; required when contentApi feature is enabled in @repo/config)"),Ot(o,"CONTENT_API_KEY",an(32),t),o.push("","# Job Queue - Inngest","INNGEST_APP_ID=api"),Ot(o,"INNGEST_EVENT_KEY",an(32),t),Ot(o,"INNGEST_SIGNING_KEY",an(32),t),o.push("INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&(o.push("","# API Port (standalone backend)","API_PORT=3010"),o.push("","# CORS + cross-subdomain cookies (production only - leave unset for local dev)","# TRUSTED_ORIGINS=https://your-app.example.com","# AUTH_COOKIE_DOMAIN=.example.com"));let s=Ao[e.emailProvider];if(s&&(o.push("","# Email"),ze(He(s,n),o)),e.paymentProvider!=="none"){let a=Po[e.paymentProvider];a&&(o.push("","# Payment"),ze(He(a,n),o))}if(e.socialProviders.length>0){o.push("","# Social auth");for(let a of e.socialProviders)ze(He(Io(a),n),o)}return e.demo&&(o.push("","# Captcha (Cloudflare Turnstile)"),ze(He([{key:"TURNSTILE_SECRET_KEY",comment:"# TODO: Add your Cloudflare Turnstile secret key"}],n),o)),o.push("","# Translations - OpenRouter (optional)","# Set to auto-translate en/* into your other locales with `pnpm translate`.","# The pre-commit hook runs it on commit; without a key it skips and untranslated","# locales fall back to the default locale. Get a key: https://openrouter.ai/keys","#OPENROUTER_API_KEY="),o.push("","# AI base - provider API keys (optional)","# Enable config.ai in packages/config and set the key for your chosen provider.","# OPENROUTER_API_KEY above also works as an AI provider key.","#ANTHROPIC_API_KEY=","#OPENAI_API_KEY="),o.push(""),o.join(`
519
+ `)}function Ro(e){let{apiUrl:t}=dr(e),n=e.frontend==="nextjs"?"NEXT_PUBLIC_API_URL":"NUXT_PUBLIC_API_URL",r=["# API Configuration",`${n}=${t}`],i=To(e);return i&&e.architecture==="separate"&&r.push("","# Production (uncomment and replace with your deployed hostnames):",`# ${n}=${i.backend}`),r.push(""),r.join(`
520
+ `)}async function ur(e){let t=Ro(e);await l(`${e.projectDir}/.env`,t+`
521
+ `+pr(e,"env")),await l(`${e.projectDir}/.env.example`,t+`
522
+ `+pr(e,"example"))}import{join as _o}from"path";async function mr(e){let t=[...e.dockerServices];if(Y[e.databaseProvider].managed&&(t=t.filter(o=>o!=="postgres")),ie[e.cacheProvider].managed&&(t=t.filter(o=>o!=="redis")),t.length===0)return!1;let n=[],r=[];t.includes("postgres")&&(n.push(` postgres:
523
+ image: postgres:18-alpine
524
524
  ports:
525
525
  - "\${POSTGRES_PORT:-5432}:5432"
526
526
  environment:
@@ -555,16 +555,16 @@ ${i?" credits: { enabled: true }":" credits: { enabled: false }"},
555
555
  image: inngest/inngest:v1.17.4
556
556
  ports:
557
557
  - "\${INNGEST_PORT:-8288}:8288"
558
- command: inngest dev`);let o=`services:
558
+ command: inngest dev`);let i=`services:
559
559
  ${n.join(`
560
560
 
561
561
  `)}
562
- `;return r.length>0&&(o+=`
562
+ `;return r.length>0&&(i+=`
563
563
  volumes:
564
564
  ${r.join(`
565
565
  `)}
566
- `),await l(Si(e.projectDir,"infra/docker-compose.yml"),o),!0}import{join as Ei}from"path";function Ai(e){let t=[];t.push({type:"node-terminal",request:"launch",name:"Dev",command:"pnpm dev",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let n=e.frontend==="nextjs"?"Next.js":"Nuxt";if(t.push({type:"node-terminal",request:"launch",name:n,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend==="nextjs"?"next":"nuxt"}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.docs&&t.push({type:"node-terminal",request:"launch",name:"Docs",command:"pnpm dev",cwd:"${workspaceFolder}/apps/docs",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.desktop){let r=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Desktop",command:"pnpm dev",cwd:"${workspaceFolder}/apps/desktop",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development",BASE_URL:"http://localhost:3000",PUBLIC_API_URL:r}})}if(t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Mail",command:"pnpm dev:mail",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.companion){let r=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Companion",command:`pnpm cli serve --url ${r}`,cwd:"${workspaceFolder}/apps/companion",skipFiles:["<node_internals>/**"]})}if(e.paymentProvider==="stripe"){let r=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${r}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Ii(e){let t=e.frontend==="nextjs"?"Next.js":"Nuxt",n=[];return e.architecture==="separate"?n.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):n.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),n}async function pr(e){let t={version:"0.2.0",configurations:Ai(e),compounds:Ii(e)};await l(Ei(e.projectDir,".vscode/launch.json"),JSON.stringify(t,null," ")+`
567
- `)}import{join as Pi}from"path";async function dr(e){if(e.architecture!=="separate")return;await l(Pi(e.projectDir,"apps/backend/src/index.ts"),`import { serve } from "@hono/node-server";
566
+ `),await l(_o(e.projectDir,"infra/docker-compose.yml"),i),!0}import{join as Oo}from"path";function xo(e){let t=[];t.push({type:"node-terminal",request:"launch",name:"Dev",command:"pnpm dev",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let n=e.frontend==="nextjs"?"Next.js":"Nuxt";if(t.push({type:"node-terminal",request:"launch",name:n,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend==="nextjs"?"next":"nuxt"}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.docs&&t.push({type:"node-terminal",request:"launch",name:"Docs",command:"pnpm dev",cwd:"${workspaceFolder}/apps/docs",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.desktop){let r=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Desktop",command:"pnpm dev",cwd:"${workspaceFolder}/apps/tauri",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development",BASE_URL:"http://localhost:3000",PUBLIC_API_URL:r}})}if(t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Mail",command:"pnpm dev:mail",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.companion){let r=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Companion",command:`pnpm cli serve --url ${r}`,cwd:"${workspaceFolder}/apps/companion",skipFiles:["<node_internals>/**"]})}if(e.paymentProvider==="stripe"){let r=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${r}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Co(e){let t=e.frontend==="nextjs"?"Next.js":"Nuxt",n=[];return e.architecture==="separate"?n.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):n.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),n}async function fr(e){let t={version:"0.2.0",configurations:xo(e),compounds:Co(e)};await l(Oo(e.projectDir,".vscode/launch.json"),JSON.stringify(t,null," ")+`
567
+ `)}import{join as Do}from"path";async function gr(e){if(e.architecture!=="separate")return;await l(Do(e.projectDir,"apps/backend/src/index.ts"),`import { serve } from "@hono/node-server";
568
568
  import app from "@repo/api";
569
569
  import { closeRedis, env, logger } from "@repo/runtime";
570
570
 
@@ -595,12 +595,12 @@ bootstrap().catch((error) => {
595
595
  logger.error("[Backend] Fatal error", error);
596
596
  process.exit(1);
597
597
  });
598
- `)}import{readFile as Ti}from"fs/promises";import{join as Ri}from"path";var an='import { drizzle } from "drizzle-orm/node-postgres";',sn=`export const db = drizzle(parsed.data.DATABASE_URL, { schema });
599
- export const pool = db.$client;`,_i={postgres:{importLine:an,instantiation:sn},neon:{importLine:`import { neon } from "@neondatabase/serverless";
598
+ `)}import{readFile as No}from"fs/promises";import{join as Lo}from"path";var cn='import { drizzle } from "drizzle-orm/node-postgres";',ln=`export const db = drizzle(parsed.data.DATABASE_URL, { schema });
599
+ export const pool = db.$client;`,$o={postgres:{importLine:cn,instantiation:ln},neon:{importLine:`import { neon } from "@neondatabase/serverless";
600
600
  import { drizzle } from "drizzle-orm/neon-http";`,instantiation:`const sql = neon(parsed.data.DATABASE_URL);
601
601
  export const db = drizzle(sql, { schema });`},supabase:{importLine:`import { drizzle } from "drizzle-orm/postgres-js";
602
602
  import postgres from "postgres";`,instantiation:`const client = postgres(parsed.data.DATABASE_URL);
603
- export const db = drizzle(client, { schema });`}};async function ur(e){let t=Ri(e.projectDir,"packages/database/src/index.ts"),n=await Ti(t,"utf-8");if(!n.includes(an)||!n.includes(sn))throw new Error("generateDbDriver: boilerplate packages/database/src/index.ts is missing the node-postgres driver anchors (the import line or the `db` instantiation block); the boilerplate drifted.");let r=_i[e.databaseProvider],o=n.replace(an,r.importLine).replace(sn,r.instantiation);await l(t,o)}import{join as _t}from"path";async function mr(e){switch(e.cacheProvider){case"redis":await Oi(e),await xi(e);break;case"upstash":await Ci(e),await Di(e);break}}async function Oi(e){await l(_t(e.projectDir,"packages/runtime/src/redis.ts"),`import type { Store } from "hono-rate-limiter";
603
+ export const db = drizzle(client, { schema });`}};async function hr(e){let t=Lo(e.projectDir,"packages/database/src/index.ts"),n=await No(t,"utf-8");if(!n.includes(cn)||!n.includes(ln))throw new Error("generateDbDriver: boilerplate packages/database/src/index.ts is missing the node-postgres driver anchors (the import line or the `db` instantiation block); the boilerplate drifted.");let r=$o[e.databaseProvider],i=n.replace(cn,r.importLine).replace(ln,r.instantiation);await l(t,i)}import{join as xt}from"path";async function yr(e){switch(e.cacheProvider){case"redis":await jo(e),await Uo(e);break;case"upstash":await Mo(e),await Vo(e);break}}async function jo(e){await l(xt(e.projectDir,"packages/runtime/src/redis.ts"),`import type { Store } from "hono-rate-limiter";
604
604
  import { Redis } from "ioredis";
605
605
  import { RedisStore, type RedisReply } from "rate-limit-redis";
606
606
  import { env } from "./env";
@@ -616,7 +616,7 @@ export interface CacheSetOptions {
616
616
  }
617
617
 
618
618
  /**
619
- * Three small helpers extended onto the native \`redis\` client for the SDK
619
+ * Small helpers extended onto the native \`redis\` client for the SDK
620
620
  * methods whose signatures differ between ioredis and Upstash. Use these in
621
621
  * your own code when you want a uniform API; everything else on \`redis\` is
622
622
  * the native ioredis surface (or Upstash, on that backend) - use those
@@ -629,6 +629,8 @@ export interface BoilerplateRedisHelpers {
629
629
  cacheGet(key: string): Promise<string | null>;
630
630
  /** Iterate keys matching a glob pattern via SCAN. Yields each key as it's discovered. */
631
631
  cacheScan(opts: { match: string; count?: number }): AsyncIterable<string>;
632
+ /** Run a Lua script via EVAL with explicit key and argument lists (the SDKs' native \`eval\` signatures differ). Returns the script's raw reply. */
633
+ cacheEval(script: string, keys: string[], args: (string | number)[]): Promise<unknown>;
632
634
  }
633
635
 
634
636
  // \`lazyConnect\` keeps the client from dialing Redis the moment this module is
@@ -655,9 +657,9 @@ ioredis.on("connect", () => {
655
657
  });
656
658
 
657
659
  /**
658
- * Native ioredis client + the three boilerplate helpers. Every native
659
- * ioredis method (\`zadd\`, \`hset\`, \`pubsub\`, \`eval\`, etc.) is available
660
- * directly on this object - see ioredis's docs for usage. The three
660
+ * Native ioredis client + the boilerplate helpers. Every native
661
+ * ioredis method (\`zadd\`, \`hset\`, \`pubsub\`, etc.) is available
662
+ * directly on this object - see ioredis's docs for usage. The
661
663
  * \`cache*\` helpers cover the SDK calls whose signatures differ between
662
664
  * ioredis and Upstash.
663
665
  */
@@ -683,6 +685,9 @@ export const redis: Redis & BoilerplateRedisHelpers = Object.assign(ioredis, {
683
685
  for (const k of keys) yield k;
684
686
  cursor = next;
685
687
  } while (cursor !== "0");
688
+ },
689
+ async cacheEval(script: string, keys: string[], args: (string | number)[]): Promise<unknown> {
690
+ return ioredis.eval(script, keys.length, ...keys, ...args);
686
691
  }
687
692
  });
688
693
 
@@ -724,7 +729,7 @@ export async function closeRedis() {
724
729
  closed = true;
725
730
  }
726
731
  }
727
- `)}async function xi(e){await l(_t(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Mutex } from "redis-semaphore";
732
+ `)}async function Uo(e){await l(xt(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Mutex } from "redis-semaphore";
728
733
  import { redis } from "./redis";
729
734
 
730
735
  export class MutexTimeoutError extends Error {
@@ -761,7 +766,7 @@ export async function withMutex<T>(
761
766
  await mutex.release();
762
767
  }
763
768
  }
764
- `)}async function Ci(e){await l(_t(e.projectDir,"packages/runtime/src/redis.ts"),`import { Redis } from "@upstash/redis";
769
+ `)}async function Mo(e){await l(xt(e.projectDir,"packages/runtime/src/redis.ts"),`import { Redis } from "@upstash/redis";
765
770
  import type { Store } from "hono-rate-limiter";
766
771
  import { env } from "./env";
767
772
 
@@ -776,7 +781,7 @@ export interface CacheSetOptions {
776
781
  }
777
782
 
778
783
  /**
779
- * Three small helpers extended onto the native \`redis\` client for the SDK
784
+ * Small helpers extended onto the native \`redis\` client for the SDK
780
785
  * methods whose signatures differ between ioredis and Upstash. Use these in
781
786
  * your own code when you want a uniform API; everything else on \`redis\` is
782
787
  * the native Upstash surface (or ioredis, on that backend) - use those
@@ -789,6 +794,8 @@ export interface BoilerplateRedisHelpers {
789
794
  cacheGet(key: string): Promise<string | null>;
790
795
  /** Iterate keys matching a glob pattern via SCAN. Yields each key as it's discovered. */
791
796
  cacheScan(opts: { match: string; count?: number }): AsyncIterable<string>;
797
+ /** Run a Lua script via EVAL with explicit key and argument lists (the SDKs' native \`eval\` signatures differ). Returns the script's raw reply. */
798
+ cacheEval(script: string, keys: string[], args: (string | number)[]): Promise<unknown>;
792
799
  }
793
800
 
794
801
  /**
@@ -804,9 +811,9 @@ const upstash = new Redis({
804
811
  });
805
812
 
806
813
  /**
807
- * Native Upstash REST client + the three boilerplate helpers. Every native
808
- * Upstash method (\`zadd\`, \`hset\`, \`json.*\`, \`eval\`, etc.) is available
809
- * directly on this object - see Upstash's docs for usage. The three
814
+ * Native Upstash REST client + the boilerplate helpers. Every native
815
+ * Upstash method (\`zadd\`, \`hset\`, \`json.*\`, etc.) is available
816
+ * directly on this object - see Upstash's docs for usage. The
810
817
  * \`cache*\` helpers cover the SDK calls whose signatures differ between
811
818
  * Upstash and ioredis.
812
819
  */
@@ -836,6 +843,9 @@ export const redis: Redis & BoilerplateRedisHelpers = Object.assign(upstash, {
836
843
  for (const k of keys) yield k;
837
844
  cursor = next;
838
845
  } while (cursor !== "0");
846
+ },
847
+ async cacheEval(script: string, keys: string[], args: (string | number)[]): Promise<unknown> {
848
+ return upstash.eval(script, keys, args);
839
849
  }
840
850
  });
841
851
 
@@ -874,7 +884,7 @@ export const limiterStore: Store = createLimiterStore();
874
884
 
875
885
  /** No persistent connection to close with Upstash REST. */
876
886
  export async function closeRedis(): Promise<void> {}
877
- `)}async function Di(e){await l(_t(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Lock } from "@upstash/lock";
887
+ `)}async function Vo(e){await l(xt(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Lock } from "@upstash/lock";
878
888
  import { redis } from "./redis";
879
889
 
880
890
  export class MutexTimeoutError extends Error {
@@ -919,7 +929,7 @@ export async function withMutex<T>(
919
929
  await lock.release();
920
930
  }
921
931
  }
922
- `)}async function fr(e){await l(`${e.projectDir}/packages/runtime/src/env.ts`,Ni(e))}function Ni(e){return`import { z } from "zod";
932
+ `)}async function vr(e){await l(`${e.projectDir}/packages/runtime/src/env.ts`,Bo(e))}function Bo(e){return`import { z } from "zod";
923
933
 
924
934
  const EnvSchema = z.object({
925
935
  NODE_ENV: z.enum(["development", "production"]).default("development"),
@@ -1040,13 +1050,13 @@ export const env = (() => {
1040
1050
  const parsedApiUrl = new URL(env.API_URL);
1041
1051
  export const apiBasePath = parsedApiUrl.pathname === "/" ? "" : parsedApiUrl.pathname;
1042
1052
  export const apiOrigin = parsedApiUrl.origin;
1043
- `}import{readFile as Li}from"fs/promises";import{join as oe}from"path";var Ot={"@upstash/redis":"^1.37.0","@upstash/lock":"^0.2.1","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7"};async function Ye(e){let t=await Li(e,"utf-8");return JSON.parse(t)}async function qe(e,t){await l(e,JSON.stringify(t,null," ")+`
1044
- `)}function ct(e,t){for(let n of t)delete e.dependencies?.[n],delete e.devDependencies?.[n]}function ze(e,t,n,r=!1){let o=r?"devDependencies":"dependencies";e[o]||(e[o]={}),e[o][t]=n}async function gr(e){await $i(e),await ji(e),await Ui(e),await Mi(e),e.frontend==="nextjs"?await Fi(e):await Vi(e)}async function $i(e){let t=oe(e.projectDir,"packages/api/package.json"),n=await Ye(t);ct(n,["sharp","@types/sharp"]),await qe(t,n)}async function ji(e){let t=oe(e.projectDir,"packages/runtime/package.json"),n=await Ye(t);e.cacheProvider==="upstash"&&(ct(n,["ioredis","rate-limit-redis","redis-semaphore"]),ze(n,"@upstash/redis",Ot["@upstash/redis"]),ze(n,"@upstash/lock",Ot["@upstash/lock"])),await qe(t,n)}async function Ui(e){let t=oe(e.projectDir,"packages/database/package.json"),n=await Ye(t);e.databaseProvider==="neon"?(ct(n,["pg","@types/pg"]),ze(n,"@neondatabase/serverless",Ot["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(ct(n,["pg","@types/pg"]),ze(n,"postgres",Ot.postgres)),await qe(t,n)}async function Mi(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/backend/package.json"),n=await Ye(t);e.deploymentTarget!=="node"&&ct(n,["@hono/node-server"]),await qe(t,n)}async function Vi(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/web-nuxt");await nn(oe(t,"server/api/[...paths].ts"),t);let n=oe(t,"package.json"),r=await Ye(n),o=r.dependencies?.["@repo/api"];o&&(delete r.dependencies?.["@repo/api"],ze(r,"@repo/api",o,!0)),await qe(n,r)}async function Fi(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/web-next");await nn(oe(t,"app/api/[[...rest]]/route.ts"),t);let n=oe(t,"package.json"),r=await Ye(n),o=r.dependencies?.["@repo/api"];o&&(delete r.dependencies?.["@repo/api"],ze(r,"@repo/api",o,!0)),await qe(n,r)}import{readFile as yr}from"fs/promises";import{join as vr}from"path";async function kr(e){let t=vr(e.projectDir,"turbo.json"),n;try{n=await yr(t,"utf-8")}catch{return}let r=JSON.parse(n),o=r.tasks?.build;if(!o)return;let i=e.frontend==="nextjs"?"NUXT_PUBLIC_*":"NEXT_PUBLIC_*",a=e.frontend==="nextjs"?new Set([".nuxt/**",".output/**"]):new Set([".next/**","!.next/cache/**"]),s=!1;if(Array.isArray(o.env)){let p=o.env.filter(f=>f!==i);p.length!==o.env.length&&(o.env=p,s=!0)}if(Array.isArray(o.outputs)){let p=o.outputs.filter(f=>!a.has(f));p.length!==o.outputs.length&&(o.outputs=p,s=!0)}s&&await l(t,JSON.stringify(r,null," ")+`
1045
- `)}var Bi=["base.json","node.json","next.json"],hr="GenerateSaaS ";async function wr(e){if(!e.demo)for(let t of Bi){let n=vr(e.projectDir,"tooling/typescript",t),r;try{r=await yr(n,"utf-8")}catch{continue}let o=JSON.parse(r);typeof o.display!="string"||!o.display.startsWith(hr)||(o.display=o.display.slice(hr.length),await l(n,JSON.stringify(o,null," ")+`
1046
- `))}}import{readFile as Ki,rm as Gi}from"fs/promises";import{existsSync as br}from"fs";import{join as Sr}from"path";async function Er(e){if(e.frontend==="nuxt")return;let t=Sr(e.projectDir,"packages/i18n/package.json");if(!br(t))throw new Error(`pruneI18nNuxt: expected ${t} to exist - did the i18n package move?`);let n=JSON.parse(await Ki(t,"utf-8")),r=!!(n.exports?.["./module"]??n.exports?.["./nuxt"]),o=!1;if(n.exports)for(let a of["./module","./nuxt"])a in n.exports&&(delete n.exports[a],o=!0);n.devDependencies&&"@nuxt/kit"in n.devDependencies&&(delete n.devDependencies["@nuxt/kit"],o=!0),o&&await l(t,JSON.stringify(n,null," ")+`
1047
- `);let i=Sr(e.projectDir,"packages/i18n/nuxt");if(r&&!br(i))throw new Error(`pruneI18nNuxt: packages/i18n declares a Nuxt export surface but ${i} is missing - did the i18n Nuxt module move?`);await Gi(i,{recursive:!0,force:!0})}import{readFile as Ar,rm as Hi}from"fs/promises";import{join as cn}from"path";async function Ir(e){e.cacheProvider==="upstash"&&await Promise.all([zi(e.projectDir),Yi(e.projectDir),Hi(cn(e.projectDir,"packages/runtime/tests/redis.test.ts"),{force:!0})])}async function zi(e){let t=cn(e,"packages/runtime/tests/setup.ts"),n;try{n=await Ar(t,"utf-8")}catch{return}let r=n.replace(/\tREDIS_URL:\s*"[^"]*",?\n/,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1053
+ `}import{readFile as Fo}from"fs/promises";import{join as oe}from"path";var Ct={"@upstash/redis":"^1.37.0","@upstash/lock":"^0.2.1","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7"};async function qe(e){let t=await Fo(e,"utf-8");return JSON.parse(t)}async function Je(e,t){await l(e,JSON.stringify(t,null," ")+`
1054
+ `)}function lt(e,t){for(let n of t)delete e.dependencies?.[n],delete e.devDependencies?.[n]}function Ye(e,t,n,r=!1){let i=r?"devDependencies":"dependencies";e[i]||(e[i]={}),e[i][t]=n}async function br(e){await Ko(e),await Go(e),await Ho(e),await zo(e),e.frontend==="nextjs"?await qo(e):await Yo(e)}async function Ko(e){let t=oe(e.projectDir,"packages/api/package.json"),n=await qe(t);lt(n,["sharp","@types/sharp"]),await Je(t,n)}async function Go(e){let t=oe(e.projectDir,"packages/runtime/package.json"),n=await qe(t);e.cacheProvider==="upstash"&&(lt(n,["ioredis","rate-limit-redis","redis-semaphore"]),Ye(n,"@upstash/redis",Ct["@upstash/redis"]),Ye(n,"@upstash/lock",Ct["@upstash/lock"])),await Je(t,n)}async function Ho(e){let t=oe(e.projectDir,"packages/database/package.json"),n=await qe(t);e.databaseProvider==="neon"?(lt(n,["pg","@types/pg"]),Ye(n,"@neondatabase/serverless",Ct["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(lt(n,["pg","@types/pg"]),Ye(n,"postgres",Ct.postgres)),await Je(t,n)}async function zo(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/backend/package.json"),n=await qe(t);e.deploymentTarget!=="node"&&lt(n,["@hono/node-server"]),await Je(t,n)}async function Yo(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/web-nuxt");await rn(oe(t,"server/api/[...paths].ts"),t);let n=oe(t,"package.json"),r=await qe(n),i=r.dependencies?.["@repo/api"];i&&(delete r.dependencies?.["@repo/api"],Ye(r,"@repo/api",i,!0)),await Je(n,r)}async function qo(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/web-next");await rn(oe(t,"app/api/[[...rest]]/route.ts"),t);let n=oe(t,"package.json"),r=await qe(n),i=r.dependencies?.["@repo/api"];i&&(delete r.dependencies?.["@repo/api"],Ye(r,"@repo/api",i,!0)),await Je(n,r)}import{readFile as wr}from"fs/promises";import{join as Sr}from"path";async function Er(e){let t=Sr(e.projectDir,"turbo.json"),n;try{n=await wr(t,"utf-8")}catch{return}let r=JSON.parse(n),i=r.tasks?.build;if(!i)return;let o=e.frontend==="nextjs"?"NUXT_PUBLIC_*":"NEXT_PUBLIC_*",s=e.frontend==="nextjs"?new Set([".nuxt/**",".output/**"]):new Set([".next/**","!.next/cache/**"]),a=!1;if(Array.isArray(i.env)){let d=i.env.filter(m=>m!==o);d.length!==i.env.length&&(i.env=d,a=!0)}if(Array.isArray(i.outputs)){let d=i.outputs.filter(m=>!s.has(m));d.length!==i.outputs.length&&(i.outputs=d,a=!0)}a&&await l(t,JSON.stringify(r,null," ")+`
1055
+ `)}var Jo=["base.json","node.json","next.json"],kr="GenerateSaaS ";async function Ar(e){if(!e.demo)for(let t of Jo){let n=Sr(e.projectDir,"tooling/typescript",t),r;try{r=await wr(n,"utf-8")}catch{continue}let i=JSON.parse(r);typeof i.display!="string"||!i.display.startsWith(kr)||(i.display=i.display.slice(kr.length),await l(n,JSON.stringify(i,null," ")+`
1056
+ `))}}import{readFile as Wo,rm as Xo}from"fs/promises";import{existsSync as Ir}from"fs";import{join as Pr}from"path";async function Tr(e){if(e.frontend==="nuxt")return;let t=Pr(e.projectDir,"packages/i18n/package.json");if(!Ir(t))throw new Error(`pruneI18nNuxt: expected ${t} to exist - did the i18n package move?`);let n=JSON.parse(await Wo(t,"utf-8")),r=!!(n.exports?.["./module"]??n.exports?.["./nuxt"]),i=!1;if(n.exports)for(let s of["./module","./nuxt"])s in n.exports&&(delete n.exports[s],i=!0);n.devDependencies&&"@nuxt/kit"in n.devDependencies&&(delete n.devDependencies["@nuxt/kit"],i=!0),i&&await l(t,JSON.stringify(n,null," ")+`
1057
+ `);let o=Pr(e.projectDir,"packages/i18n/nuxt");if(r&&!Ir(o))throw new Error(`pruneI18nNuxt: packages/i18n declares a Nuxt export surface but ${o} is missing - did the i18n Nuxt module move?`);await Xo(o,{recursive:!0,force:!0})}import{readFile as Rr,rm as Zo}from"fs/promises";import{join as pn}from"path";async function _r(e){e.cacheProvider==="upstash"&&await Promise.all([Qo(e.projectDir),es(e.projectDir),Zo(pn(e.projectDir,"packages/runtime/tests/redis.test.ts"),{force:!0})])}async function Qo(e){let t=pn(e,"packages/runtime/tests/setup.ts"),n;try{n=await Rr(t,"utf-8")}catch{return}let r=n.replace(/\tREDIS_URL:\s*"[^"]*",?\n/,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1048
1058
  UPSTASH_REDIS_REST_TOKEN: "test-token",
1049
- `);r!==n&&await l(t,r)}async function Yi(e){let t=cn(e,"packages/api/tests/setup.ts"),n;try{n=await Ar(t,"utf-8")}catch{return}let r=n;r=r.replace(/\tREDIS_URL:\s*"[^"]*",?\n/g,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1059
+ `);r!==n&&await l(t,r)}async function es(e){let t=pn(e,"packages/api/tests/setup.ts"),n;try{n=await Rr(t,"utf-8")}catch{return}let r=n;r=r.replace(/\tREDIS_URL:\s*"[^"]*",?\n/g,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1050
1060
  UPSTASH_REDIS_REST_TOKEN: "test-token",
1051
1061
  `),r=r.replace(/vi\.mock\("ioredis"[\s\S]*?\n\}\);\n\n?/,""),r=r.replace(/vi\.mock\("rate-limit-redis"[\s\S]*?\n\}\);\n\n?/,""),r=r.replace(/\t\t\tREDIS_URL:\s*"[^"]*",?\n/,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1052
1062
  UPSTASH_REDIS_REST_TOKEN: "test-token",
@@ -1067,114 +1077,256 @@ vi.mock("@upstash/lock", () => {
1067
1077
  return { Lock };
1068
1078
  });
1069
1079
 
1070
- $1`),r!==n&&await l(t,r)}import{readdir as fn,readFile as j,rm as w}from"fs/promises";import{join as h}from"path";import{readFile as Ct,rm as qi}from"fs/promises";import{join as xt}from"path";function Ji(e){return new RegExp(`^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-start(?: \\*\\/\\})?[ \\t]*\\r?\\n[\\s\\S]*?^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-end(?: \\*\\/\\})?[ \\t]*\\r?\\n`,"gm")}function J(e,t,n="ai",r="stripDesktopAi"){let o=Ji(n);if(e.match(o)===null)throw new Error(`${r}: expected gsaas ${n} markers in ${t}, but found none (boilerplate drift).`);let i=e.replace(o,"");if(i.includes(`gsaas:${n}-start`)||i.includes(`gsaas:${n}-end`))throw new Error(`${r}: an unbalanced gsaas ${n} marker is left in ${t} (boilerplate drift).`);return i.replace(/\n{3,}/g,`
1080
+ $1`),r!==n&&await l(t,r)}import{readdir as hn,readFile as $,rm as x}from"fs/promises";import{join as y}from"path";import{readFile as Nt,rm as ts}from"fs/promises";import{join as Dt}from"path";function ns(e){return new RegExp(`^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-start(?: \\*\\/\\})?[ \\t]*\\r?\\n[\\s\\S]*?^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-end(?: \\*\\/\\})?[ \\t]*\\r?\\n`,"gm")}function F(e,t,n="ai",r="stripDesktopAi"){let i=ns(n);if(e.match(i)===null)throw new Error(`${r}: expected gsaas ${n} markers in ${t}, but found none (boilerplate drift).`);let o=e.replace(i,"");if(o.includes(`gsaas:${n}-start`)||o.includes(`gsaas:${n}-end`))throw new Error(`${r}: an unbalanced gsaas ${n} marker is left in ${t} (boilerplate drift).`);return o.replace(/\n{3,}/g,`
1071
1081
 
1072
- `)}async function _(e,t,n,r,o){let i=await Ct(e,"utf-8"),a=i.indexOf(t);if(a===-1)throw new Error(`${o}: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(i.indexOf(t,a+t.length)!==-1)throw new Error(`${o}: the ${r} seam appears more than once (boilerplate drift).`);await l(e,i.slice(0,a)+n+i.slice(a+t.length))}function lt(e,t,n,r){if(!(t in e))throw new Error(`${r}: expected ${n} (boilerplate drift).`);delete e[t]}function Dt(e){return e.frontend==="nextjs"?"next":"nuxt"}async function Nt(e,t,n,r,o,i){let a=xt(e,"docs",t);await qi(xt(a,`${n}.mdx`)),await _(xt(a,"meta.json"),` "${n}",
1073
- `,"",`${t} meta.json ${n} nav entry`,o);let s=xt(a,"ai.mdx"),f=(await Ct(s,"utf-8")).split(`
1074
- `).find(m=>m.includes(`href="${r}"`));if(f===void 0)throw new Error(`${o}: expected the ai.mdx card linking to ${r} (boilerplate drift).`);if(await _(s,`${f}
1075
- `,"",`${t} ai.mdx ${n} card`,o),i!==void 0){let m=`| **${i}** |`,v=(await Ct(s,"utf-8")).split(`
1076
- `).find(b=>b.startsWith(m));if(v===void 0)throw new Error(`${o}: expected the ai.mdx "${i}" hub-table row (boilerplate drift).`);await _(s,`${v}
1077
- `,"",`${t} ai.mdx ${i} hub-table row`,o)}}async function Lt(e){let t=`import { config } from "@repo/config";
1078
- `,n=await Ct(e,"utf-8");if(!n.includes(t))return;let r=n.replace(t,""),o=r.replace(/\/\*[\s\S]*?\*\//g,"").replace(/\/\/[^\n]*/g,"").replace(/"(?:\\.|[^"\\])*"/g,'""').replace(/'(?:\\.|[^'\\])*'/g,"''").replace(/`(?:\\.|[^`\\])*`/g,"``");/\bconfig\b/.test(o)||await l(e,r)}import{readFile as Wi}from"fs/promises";import{join as Xi}from"path";async function ln(e){if(e.rag)return;let t=Xi(e.projectDir,"packages/config/src/index.ts"),n=await Wi(t,"utf-8");if(!/rag:\s*\{\s*enabled:\s*false\s*\}/.test(n))throw new Error("stripRag: expected `config.rag` emitted with `enabled: false` for a rag-off build, but it was missing (generator drift).")}import{readFile as Pr,rm as pn}from"fs/promises";import{join as Re}from"path";async function dn(e){if(e.mcpServer)return;let t=e.projectDir,n="stripMcpServer";await pn(Re(t,"packages/api/src/routes/internal/ai/mcp.ts")),await pn(Re(t,"packages/api/tests/routes/mcp.test.ts")),await pn(Re(t,"packages/auth/src/mcp.ts"));let r=Re(t,"packages/api/src/routes/internal/index.ts");await _(r,`import mcpRoutes from "./ai/mcp";
1079
- `,"","internal router mcp import",n),await _(r,'\n// Outward MCP server (`/mcp` + its OAuth `.well-known` discovery), gated on `config.mcpServer`.\n// Mounted at the API root so the discovery metadata sits at `{apiBasePath}/.well-known/...` where\n// an external agent probes it. Off by default, so the routes are absent entirely when disabled. It\n// is not chained into the typed router above: external agents (not the typed RPC client) call it,\n// so it needs no `AppType` inference, and gating it keeps the feature truly inert when off.\nif (config.mcpServer?.enabled) {\n app.route("/", mcpRoutes);\n}\n',"","internal router mcp mount",n),await Lt(r);let o=Re(t,"packages/auth/src/config.ts");await _(o,` magicLink,
1082
+ `)}async function O(e,t,n,r,i){let o=await Nt(e,"utf-8"),s=o.indexOf(t);if(s===-1)throw new Error(`${i}: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(o.indexOf(t,s+t.length)!==-1)throw new Error(`${i}: the ${r} seam appears more than once (boilerplate drift).`);await l(e,o.slice(0,s)+n+o.slice(s+t.length))}function we(e,t,n,r){if(!(t in e))throw new Error(`${r}: expected ${n} (boilerplate drift).`);delete e[t]}function Lt(e){return e.frontend==="nextjs"?"next":"nuxt"}async function $t(e,t,n,r,i,o){let s=Dt(e,"docs",t);await ts(Dt(s,`${n}.mdx`)),await O(Dt(s,"meta.json"),` "${n}",
1083
+ `,"",`${t} meta.json ${n} nav entry`,i);let a=Dt(s,"ai.mdx"),m=(await Nt(a,"utf-8")).split(`
1084
+ `).find(p=>p.includes(`href="${r}"`));if(m===void 0)throw new Error(`${i}: expected the ai.mdx card linking to ${r} (boilerplate drift).`);if(await O(a,`${m}
1085
+ `,"",`${t} ai.mdx ${n} card`,i),o!==void 0){let p=`| **${o}** |`,w=(await Nt(a,"utf-8")).split(`
1086
+ `).find(b=>b.startsWith(p));if(w===void 0)throw new Error(`${i}: expected the ai.mdx "${o}" hub-table row (boilerplate drift).`);await O(a,`${w}
1087
+ `,"",`${t} ai.mdx ${o} hub-table row`,i)}}async function jt(e){let t=`import { config } from "@repo/config";
1088
+ `,n=await Nt(e,"utf-8");if(!n.includes(t))return;let r=n.replace(t,""),i=r.replace(/\/\*[\s\S]*?\*\//g,"").replace(/\/\/[^\n]*/g,"").replace(/"(?:\\.|[^"\\])*"/g,'""').replace(/'(?:\\.|[^'\\])*'/g,"''").replace(/`(?:\\.|[^`\\])*`/g,"``");/\bconfig\b/.test(i)||await l(e,r)}import{readFile as rs}from"fs/promises";import{join as is}from"path";async function dn(e){if(e.rag)return;let t=is(e.projectDir,"packages/config/src/index.ts"),n=await rs(t,"utf-8");if(!/rag:\s*\{\s*enabled:\s*false\s*\}/.test(n))throw new Error("stripRag: expected `config.rag` emitted with `enabled: false` for a rag-off build, but it was missing (generator drift).")}import{readFile as Or,rm as un}from"fs/promises";import{join as Oe}from"path";async function mn(e){if(e.mcpServer)return;let t=e.projectDir,n="stripMcpServer";await un(Oe(t,"packages/api/src/routes/internal/ai/mcp.ts")),await un(Oe(t,"packages/api/tests/routes/mcp.test.ts")),await un(Oe(t,"packages/auth/src/mcp.ts"));let r=Oe(t,"packages/api/src/routes/internal/index.ts");await O(r,`import mcpRoutes from "./ai/mcp";
1089
+ `,"","internal router mcp import",n),await O(r,'\n// Outward MCP server (`/mcp` + its OAuth `.well-known` discovery), gated on `config.mcpServer`.\n// Mounted at the API root so the discovery metadata sits at `{apiBasePath}/.well-known/...` where\n// an external agent probes it. Off by default, so the routes are absent entirely when disabled. It\n// is not chained into the typed router above: external agents (not the typed RPC client) call it,\n// so it needs no `AppType` inference, and gating it keeps the feature truly inert when off.\nif (config.mcpServer?.enabled) {\n app.route("/", mcpRoutes);\n}\n',"","internal router mcp mount",n),await jt(r);let i=Oe(t,"packages/auth/src/config.ts");await O(i,` magicLink,
1080
1090
  mcp,
1081
1091
  organization,`,` magicLink,
1082
- organization,`,"auth config mcp plugin import",n),await _(o,` // Outward MCP server: turns Better Auth into an OAuth 2.1 provider so an
1092
+ organization,`,"auth config mcp plugin import",n),await O(i,` // Outward MCP server: turns Better Auth into an OAuth 2.1 provider so an
1083
1093
  // external agent (Hermes/OpenClaw) can authenticate and drive the app's
1084
1094
  // capability layer over MCP. Brings the oauthApplication/oauthAccessToken/
1085
1095
  // oauthConsent tables (run \`pnpm auth:generate\` after toggling).
1086
1096
  ...(config.mcpServer?.enabled
1087
1097
  ? [mcp({ loginPage: \`\${config.baseUrl}\${config.routes.auth}/login\` })]
1088
1098
  : []),
1089
- `,"","auth config mcp plugin block",n);let i=Re(t,"packages/auth/package.json"),a=JSON.parse(await Pr(i,"utf-8"));if(!a.exports)throw new Error(`${n}: expected an exports map in packages/auth/package.json (boilerplate drift).`);lt(a.exports,"./mcp",'the "./mcp" export in packages/auth/package.json',n),await l(i,JSON.stringify(a,null," ")+`
1090
- `);let s=Re(t,"packages/api/package.json"),p=JSON.parse(await Pr(s,"utf-8"));if(!p.dependencies)throw new Error(`${n}: expected dependencies in packages/api/package.json (boilerplate drift).`);lt(p.dependencies,"@modelcontextprotocol/sdk","@modelcontextprotocol/sdk in packages/api dependencies",n),await l(s,JSON.stringify(p,null," ")+`
1091
- `);let f=Dt(e);await Nt(t,f,"companion-agent-mcp",`/${f}/companion-agent-mcp`,n,"MCP")}import{rm as W}from"fs/promises";import{join as X}from"path";import{readFile as un}from"fs/promises";import{join as Je}from"path";async function Tr(e,t){let n=Je(e,"packages/api/src/routes/internal/index.ts");await l(n,J(await un(n,"utf-8"),"internal router","companion",t)),await Lt(n);let r=Je(e,"packages/api/package.json"),o=JSON.parse(await un(r,"utf-8"));if(!o.dependencies)throw new Error(`${t}: expected dependencies in packages/api/package.json (boilerplate drift).`);lt(o.dependencies,"@repo/companion-protocol","@repo/companion-protocol in packages/api dependencies",t),await l(r,JSON.stringify(o,null," ")+`
1092
- `);let i=Je(e,"packages/api/src/ai/schedule-runner.ts");await l(i,J(await un(i,"utf-8"),"schedule-runner.ts","companion",t));let a=Je(e,"packages/api/src/ai/settings-store.ts");await _(a,`import { parseCompanionKey } from "../relay/companion-key";
1099
+ `,"","auth config mcp plugin block",n);let o=Oe(t,"packages/auth/package.json"),s=JSON.parse(await Or(o,"utf-8"));if(!s.exports)throw new Error(`${n}: expected an exports map in packages/auth/package.json (boilerplate drift).`);we(s.exports,"./mcp",'the "./mcp" export in packages/auth/package.json',n),await l(o,JSON.stringify(s,null," ")+`
1100
+ `);let a=Oe(t,"packages/api/package.json"),d=JSON.parse(await Or(a,"utf-8"));if(!d.dependencies)throw new Error(`${n}: expected dependencies in packages/api/package.json (boilerplate drift).`);we(d.dependencies,"@modelcontextprotocol/sdk","@modelcontextprotocol/sdk in packages/api dependencies",n),await l(a,JSON.stringify(d,null," ")+`
1101
+ `);let m=Lt(e);await $t(t,m,"companion-agent-mcp",`/${m}/companion-agent-mcp`,n,"MCP")}import{rm as X}from"fs/promises";import{join as Z}from"path";import{readFile as fn}from"fs/promises";import{join as We}from"path";async function xr(e,t){let n=We(e,"packages/api/src/routes/internal/index.ts");await l(n,F(await fn(n,"utf-8"),"internal router","companion",t)),await jt(n);let r=We(e,"packages/api/package.json"),i=JSON.parse(await fn(r,"utf-8"));if(!i.dependencies)throw new Error(`${t}: expected dependencies in packages/api/package.json (boilerplate drift).`);we(i.dependencies,"@repo/companion-protocol","@repo/companion-protocol in packages/api dependencies",t),await l(r,JSON.stringify(i,null," ")+`
1102
+ `);let o=We(e,"packages/api/src/ai/schedule-runner.ts");await l(o,F(await fn(o,"utf-8"),"schedule-runner.ts","companion",t));let s=We(e,"packages/api/src/ai/settings-store.ts");await O(s,`import { parseCompanionKey } from "../relay/companion-key";
1093
1103
 
1094
- `,"","settings-store.ts relay import",t),await _(a," * - COMPANION (when `config.companion.enabled`): a well-formed companion key\n * `<connectionId>@<deviceId>@<modelId>` is also accepted, so a default/fallback model that points\n * at a paired CLI persists (the run path resolves it, and the daemon handles an offline device).\n * Without this, the `@`-separated key is neither a registry key nor a `provider::modelId` key, so\n * it would silently clear to `null` on save and vanish on reload.\n","","settings-store.ts COMPANION docstring bullet",t),await _(a," *\n * When `opts.allowCompanion` is `false`, a companion key is REJECTED even when the companion is\n * enabled - used by the builder-task surfaces, whose runs are background/cloud-only and can never\n * dispatch to a device-bound CLI.\n","","settings-store.ts opts.allowCompanion docstring paragraph",t),await _(a," * @param opts - `allowCompanion` (default `true`) controls companion-key acceptance.\n","","settings-store.ts @param opts",t),await _(a,`export function validModelKey(
1104
+ `,"","settings-store.ts relay import",t),await O(s," * - COMPANION (when `config.companion.enabled`): a well-formed companion key\n * `<connectionId>@<deviceId>@<modelId>` is also accepted, so a default/fallback model that points\n * at a paired CLI persists (the run path resolves it, and the daemon handles an offline device).\n * Without this, the `@`-separated key is neither a registry key nor a `provider::modelId` key, so\n * it would silently clear to `null` on save and vanish on reload.\n","","settings-store.ts COMPANION docstring bullet",t),await O(s," *\n * When `opts.allowCompanion` is `false`, a companion key is REJECTED even when the companion is\n * enabled - used by the builder-task surfaces, whose runs are background/cloud-only and can never\n * dispatch to a device-bound CLI.\n","","settings-store.ts opts.allowCompanion docstring paragraph",t),await O(s," * @param opts - `allowCompanion` (default `true`) controls companion-key acceptance.\n","","settings-store.ts @param opts",t),await O(s,`export function validModelKey(
1095
1105
  key: string | null | undefined,
1096
1106
  opts: { allowCompanion?: boolean } = {}
1097
1107
  ): string | null {
1098
1108
  `,`export function validModelKey(key: string | null | undefined): string | null {
1099
- `,"settings-store.ts validModelKey signature",t),await _(a,` if (
1109
+ `,"settings-store.ts validModelKey signature",t),await O(s,` if (
1100
1110
  opts.allowCompanion !== false &&
1101
1111
  config.companion?.enabled === true &&
1102
1112
  parseCompanionKey(key) !== null
1103
1113
  ) {
1104
1114
  return key;
1105
1115
  }
1106
- `,"","settings-store.ts companion-key branch",t);let s=Je(e,"packages/api/src/ai/task-run.ts");await _(s,`import { parseCompanionKey } from "../relay/companion-key";
1107
- `,"","task-run.ts relay import",t),await _(s,`/** Whether a chain link is usable for a task run: present and not a companion (device) key. */
1116
+ `,"","settings-store.ts companion-key branch",t);let a=We(e,"packages/api/src/ai/task-run.ts");await O(a,`import { parseCompanionKey } from "../relay/companion-key";
1117
+ `,"","task-run.ts relay import",t),await O(a,`/** Whether a chain link is usable for a task run: present and not a companion (device) key. */
1108
1118
  `,`/** Whether a chain link is usable for a task run: a present, non-empty key. */
1109
- `,"task-run.ts usableTaskModelKey docstring",t),await _(s,` return typeof key === "string" && key.length > 0 && parseCompanionKey(key) === null;
1119
+ `,"task-run.ts usableTaskModelKey docstring",t),await O(a,` return typeof key === "string" && key.length > 0 && parseCompanionKey(key) === null;
1110
1120
  `,` return typeof key === "string" && key.length > 0;
1111
- `,"task-run.ts usableTaskModelKey body",t),await _(s,` * override, then the builder's \`defaults.web.model\`, then the acting user's account default -
1121
+ `,"task-run.ts usableTaskModelKey body",t),await O(a,` * override, then the builder's \`defaults.web.model\`, then the acting user's account default -
1112
1122
  * skipping companion (device-bound) links, which are valid for chat but never for a background
1113
1123
  * task - and delegating the final resolution to {@link resolveChatRun}, which owns BYOK/platform
1114
- `," * override, then the builder's `defaults.web.model`, then the acting user's account default,\n * delegating the final resolution to {@link resolveChatRun}, which owns BYOK/platform\n","task-run.ts resolveTaskRun docstring model chain",t);let p=Je(e,"packages/api/src/routes/internal/ai/tasks-router.ts");await _(p,` modelKey: validModelKey(override?.modelKey ?? null, { allowCompanion: false }),
1124
+ `," * override, then the builder's `defaults.web.model`, then the acting user's account default,\n * delegating the final resolution to {@link resolveChatRun}, which owns BYOK/platform\n","task-run.ts resolveTaskRun docstring model chain",t);let d=We(e,"packages/api/src/routes/internal/ai/tasks-router.ts");await O(d,` modelKey: validModelKey(override?.modelKey ?? null, { allowCompanion: false }),
1115
1125
  `,` modelKey: validModelKey(override?.modelKey ?? null),
1116
- `,"tasks-router.ts listTaskOverrides validModelKey",t),await _(p,` if (typeof body.modelKey === "string" && validModelKey(body.modelKey, { allowCompanion: false }) === null) {
1126
+ `,"tasks-router.ts listTaskOverrides validModelKey",t),await O(d,` if (typeof body.modelKey === "string" && validModelKey(body.modelKey, { allowCompanion: false }) === null) {
1117
1127
  `,` if (typeof body.modelKey === "string" && validModelKey(body.modelKey) === null) {
1118
- `,"tasks-router.ts putTask validModelKey",t)}async function mn(e){if(e.companion)return;let t=e.projectDir,n="stripCompanion";await W(X(t,"apps/companion"),{recursive:!0}),await W(X(t,"packages/companion-protocol"),{recursive:!0}),e.desktop&&e.desktopAi||await W(X(t,"packages/agent-runtime"),{recursive:!0}),await W(X(t,"packages/api/src/relay"),{recursive:!0}),await W(X(t,"packages/api/tests/relay"),{recursive:!0}),await W(X(t,"packages/api/src/routes/internal/companion.ts")),await W(X(t,"packages/api/src/routes/internal/companion-transport.ts")),await W(X(t,"packages/api/src/routes/internal/companion-install.ts")),await W(X(t,"packages/api/tests/routes/companion.test.ts")),await W(X(t,"packages/api/tests/routes/companion-transport.test.ts")),await W(X(t,"packages/api/tests/routes/companion-install.test.ts")),await Tr(t,n);let r=Dt(e);await Nt(t,r,"companion",`/${r}/companion`,n,"Companions")}var Zi=new Set(["ci.yml","desktop-release.yml"]),Qi=["cli","cli:clean","demo:bench","playground:regen","playground:test","playground:test:units","playground:test:build"];async function _r(e){let t=h(e.projectDir,".github/workflows"),n=await fn(t).catch(()=>[]);for(let r of n)Zi.has(r)||await w(h(t,r),{recursive:!0,force:!0})}async function Or(e){let t=h(e.projectDir,"package.json"),n=await j(t,"utf-8"),r=JSON.parse(n),o=!1;if(r.scripts){for(let i of Qi)i in r.scripts&&(delete r.scripts[i],o=!0);if(!vt(e))for(let i of["infra","infra:stop"])i in r.scripts&&(delete r.scripts[i],o=!0)}o&&await l(t,JSON.stringify(r,null," ")+`
1119
- `)}async function xr(e){let t=h(e.projectDir,"package.json"),n=await j(t,"utf-8"),r=JSON.parse(n);!r.scripts||!("dev"in r.scripts)||(r.scripts.dev=e.architecture==="separate"?"turbo run dev --continue":"turbo run dev --continue --filter=!backend",await l(t,JSON.stringify(r,null," ")+`
1120
- `))}async function Cr(e){let t=e.frontend==="nextjs"?"apps/web-nuxt":"apps/web-next";await w(h(e.projectDir,t),{recursive:!0,force:!0})}async function Dr(e){e.docs||await w(h(e.projectDir,"apps/docs"),{recursive:!0})}async function Nr(e){let t=e.frontend==="nextjs"?"docs/nuxt":"docs/next";if(await w(h(e.projectDir,t),{recursive:!0,force:!0}),await w(h(e.projectDir,"docs/index.mdx")),!e.desktop)await w(h(e.projectDir,"docs/desktop"),{recursive:!0,force:!0});else if(!e.desktopAi){await w(h(e.projectDir,"docs/desktop/ai"),{recursive:!0,force:!0});let n=h(e.projectDir,"docs/desktop/meta.json"),r=JSON.parse(await j(n,"utf-8"));r.pages=r.pages.filter(o=>o!=="ai"),await l(n,`${JSON.stringify(r,null,2)}
1121
- `)}}async function Lr(e){if(e.desktop)return;await w(h(e.projectDir,"apps/desktop"),{recursive:!0});let t=h(e.projectDir,"packages/i18n/translations");for(let n of await fn(t,{withFileTypes:!0}))n.isDirectory()&&await w(h(t,n.name,"desktop.json"),{force:!0});await w(h(e.projectDir,".github/workflows/desktop-release.yml"))}var Rr=`
1122
- # Local-embedding model binaries are fetched on install/build (see
1123
- # scripts/fetch-embedding-model.mjs), never committed.
1124
- resources/models/
1125
- `;function ea(e){if(!e.includes(Rr))throw new Error("stripDesktopAi: expected the resources/models .gitignore block in apps/desktop/.gitignore, but it was missing (boilerplate drift).");return e.replace(Rr,`
1126
- `)}function M(e,t,n,r){let o=e.indexOf(t);if(o===-1)throw new Error(`stripDesktopAi: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(e.indexOf(t,o+t.length)!==-1)throw new Error(`stripDesktopAi: the ${r} seam appears more than once (boilerplate drift).`);return e.slice(0,o)+n+e.slice(o+t.length)}async function $r(e){if(!e.desktop||e.desktopAi)return;let t=e.projectDir;await w(h(t,"apps/desktop/src/main/ai"),{recursive:!0}),await w(h(t,"apps/desktop/resources/ai-skills"),{recursive:!0}),await w(h(t,"apps/desktop/resources/knowledge"),{recursive:!0,force:!0}),await w(h(t,"apps/desktop/scripts/fetch-embedding-model.mjs")),await w(h(t,"apps/desktop/resources/models"),{recursive:!0,force:!0}),await w(h(t,"apps/desktop/src/renderer/src/screens/agents"),{recursive:!0}),await w(h(t,"apps/desktop/src/renderer/src/screens/integrations"),{recursive:!0}),await w(h(t,"apps/desktop/src/renderer/src/screens/ai"),{recursive:!0}),await w(h(t,"apps/desktop/src/renderer/src/lib/ai.ts")),await w(h(t,"apps/desktop/src/renderer/src/hooks/use-ai.ts")),await w(h(t,"apps/desktop/src/renderer/src/hooks/use-ai-scope.ts")),await w(h(t,"apps/desktop/src/renderer/src/screens/schedules.tsx")),await w(h(t,"apps/desktop/src/renderer/src/components/side-panel-dock.tsx")),await w(h(t,"apps/desktop/src/renderer/src/components/side-panel.tsx")),await w(h(t,"apps/desktop/src/renderer/src/config/side-panels.tsx")),await w(h(t,"apps/desktop/src/renderer/src/lib/side-panel-state.ts")),await w(h(t,"apps/desktop/tests/renderer/lib/side-panel-state.test.ts")),await w(h(t,"apps/desktop/src/renderer/src/lib/chat-prefs.ts")),await w(h(t,"apps/desktop/tests/renderer/lib/chat-prefs.test.ts")),await w(h(t,"apps/desktop/src/renderer/src/lib/ai-tab-state.ts")),await w(h(t,"apps/desktop/tests/renderer/lib/ai-tab-state.test.ts")),await w(h(t,"apps/desktop/tests/main/ai"),{recursive:!0}),await w(h(t,"apps/desktop/tests/main/ai-import-boundary.test.ts")),await w(h(t,"apps/desktop/tests/renderer/lib/ai.test.ts"));let n=h(t,"apps/desktop/package.json"),r=JSON.parse(await j(n,"utf-8")),o=["@repo/ai","@repo/agent-runtime","@anthropic-ai/claude-agent-sdk","@modelcontextprotocol/sdk","cross-spawn","@huggingface/transformers","@orama/orama","@homebridge/node-pty-prebuilt-multiarch","@xterm/xterm","@xterm/addon-fit"];for(let p of o){if(!r.dependencies||!(p in r.dependencies))throw new Error(`stripDesktopAi: expected ${p} in apps/desktop dependencies (boilerplate drift).`);delete r.dependencies[p]}for(let p of["fetch:model","predev","prebuild"]){if(!r.scripts||!(p in r.scripts))throw new Error(`stripDesktopAi: expected the ${p} script in apps/desktop package.json (boilerplate drift).`);delete r.scripts[p]}await l(n,JSON.stringify(r,null," ")+`
1127
- `);let i=h(t,"apps/desktop/.gitignore"),a=await j(i,"utf-8");await l(i,ea(a)),await ta(t);let s=h(t,"packages/i18n/translations");for(let p of await fn(s,{withFileTypes:!0})){if(!p.isDirectory())continue;let f=h(s,p.name,"desktop.json"),m=await j(f,"utf-8").catch(()=>null);if(m===null)continue;let d=JSON.parse(m),v=!1;"agents"in d&&(delete d.agents,v=!0),"ai_hub"in d&&(delete d.ai_hub,v=!0),"schedules"in d&&(delete d.schedules,v=!0),"integrations"in d&&(delete d.integrations,v=!0),v&&await l(f,JSON.stringify(d,null," ")+`
1128
- `)}}async function ta(e){let t=h(e,"apps/desktop/src/main/ipc.ts"),n=J(await j(t,"utf-8"),"main/ipc.ts");await l(t,n);let r=h(e,"apps/desktop/src/main/config.ts"),o=await j(r,"utf-8");o=M(o,`,
1129
- /** AI tool orchestration ("agents") feature flags. */
1130
- agents: desktopConfig.agents`,"","main/config agents field"),await l(r,o);let i=h(e,"apps/desktop/src/preload/index.ts"),a=await j(i,"utf-8");a=M(a,`import type {
1131
- AdapterCapabilities,
1132
- AuthStatus,
1133
- ConnectionRef,
1134
- DefaultSelection,
1135
- DetectResult,
1136
- IntegrationInfo,
1137
- ModelInfo,
1138
- ModelRef,
1139
- PermissionDecision,
1140
- RunEvent
1141
- } from '@repo/ai/backends'
1142
- `,"","preload @repo/ai type import"),a=M(a,`import type { ChatSession, ScheduleRun, ScheduleTrigger } from '@repo/ai/agents'
1143
- `,"","preload @repo/ai/agents type import"),a=M(a,`import type { ReasoningEffort } from '@repo/ai/backends'
1144
- `,"","preload ReasoningEffort type import"),a=M(a,`import type { DesktopTaskSpec } from '@repo/config/types'
1145
- `,"","preload DesktopTaskSpec import"),a=M(a,`import type { ScheduleView } from '../main/ai/ipc'
1146
- `,"","preload ScheduleView import");let s=/,\n[ \t]*\/\/ gsaas:ai-start\n[\s\S]*?\n[ \t]*\/\/ gsaas:ai-end\n/g,p=a.match(s);if(p===null)throw new Error("stripDesktopAi: expected the preload `ai` bridge marker region, but it was missing (boilerplate drift).");if(p.length>1)throw new Error("stripDesktopAi: the preload `ai` bridge marker region appears more than once (boilerplate drift).");a=a.replace(s,`
1147
- `),a=J(a,"preload/index.ts"),await l(i,a);let f=h(e,"apps/desktop/src/renderer/src/components/shell.tsx"),m=J(await j(f,"utf-8"),"components/shell.tsx");await l(f,m);let d=h(e,"apps/desktop/src/renderer/src/router.tsx"),v=await j(d,"utf-8");v=M(v,`import { clientConfig } from '@/lib/config'
1148
- `,"","router clientConfig import"),v=M(v,` createRouter,
1149
- redirect
1150
- } from '@tanstack/react-router'`,` createRouter
1151
- } from '@tanstack/react-router'`,"router redirect import specifier"),v=M(v,`import { AiHubScreen } from '@/screens/ai'
1152
- `,"","router AiHubScreen import"),v=J(v,"router.tsx"),v=M(v,` ...(clientConfig.agentsEnabled ? [aiRoute, agentsRoute, schedulesRoute, integrationsRoute] : []),
1153
- `,"","router ai route spread"),await l(d,v);let b=h(e,"apps/desktop/src/renderer/src/config/sidebar.ts"),I=await j(b,"utf-8");I=M(I,`import {
1128
+ `,"tasks-router.ts putTask validModelKey",t)}async function gn(e){if(e.companion)return;let t=e.projectDir,n="stripCompanion";await X(Z(t,"apps/companion"),{recursive:!0}),await X(Z(t,"packages/companion-protocol"),{recursive:!0}),e.desktop&&e.desktopAi||await X(Z(t,"packages/agent-runtime"),{recursive:!0}),await X(Z(t,"packages/api/src/relay"),{recursive:!0}),await X(Z(t,"packages/api/tests/relay"),{recursive:!0}),await X(Z(t,"packages/api/src/routes/internal/companion.ts")),await X(Z(t,"packages/api/src/routes/internal/companion-transport.ts")),await X(Z(t,"packages/api/src/routes/internal/companion-install.ts")),await X(Z(t,"packages/api/tests/routes/companion.test.ts")),await X(Z(t,"packages/api/tests/routes/companion-transport.test.ts")),await X(Z(t,"packages/api/tests/routes/companion-install.test.ts")),await xr(t,n);let r=Lt(e);await $t(t,r,"companion",`/${r}/companion`,n,"Companions")}var os=new Set(["ci.yml","tauri-release.yml"]),ss=["cli","cli:clean","demo:bench","playground:regen","playground:test","playground:test:units","playground:test:build"];async function Cr(e){let t=y(e.projectDir,".github/workflows"),n=await hn(t).catch(()=>[]);for(let r of n)os.has(r)||await x(y(t,r),{recursive:!0,force:!0})}async function Dr(e){let t=y(e.projectDir,"package.json"),n=await $(t,"utf-8"),r=JSON.parse(n),i=!1;if(r.scripts){for(let o of ss)o in r.scripts&&(delete r.scripts[o],i=!0);if(!vt(e))for(let o of["infra","infra:stop"])o in r.scripts&&(delete r.scripts[o],i=!0)}i&&await l(t,JSON.stringify(r,null," ")+`
1129
+ `)}async function Nr(e){let t=y(e.projectDir,"package.json"),n=await $(t,"utf-8"),r=JSON.parse(n);!r.scripts||!("dev"in r.scripts)||(r.scripts.dev=e.architecture==="separate"?"turbo run dev --continue":"turbo run dev --continue --filter=!backend",await l(t,JSON.stringify(r,null," ")+`
1130
+ `))}async function Lr(e){let t=e.frontend==="nextjs"?"apps/web-nuxt":"apps/web-next";await x(y(e.projectDir,t),{recursive:!0,force:!0})}async function $r(e){e.docs||await x(y(e.projectDir,"apps/docs"),{recursive:!0})}async function jr(e){let t=e.frontend==="nextjs"?"docs/nuxt":"docs/next";if(await x(y(e.projectDir,t),{recursive:!0,force:!0}),await x(y(e.projectDir,"docs/index.mdx")),!e.desktop)await x(y(e.projectDir,"docs/desktop"),{recursive:!0,force:!0});else if(!e.desktopAi){await x(y(e.projectDir,"docs/desktop/ai"),{recursive:!0,force:!0});let n=y(e.projectDir,"docs/desktop/meta.json"),r=JSON.parse(await $(n,"utf-8"));r.pages=r.pages.filter(i=>i!=="ai"),await l(n,`${JSON.stringify(r,null,2)}
1131
+ `)}}async function Ur(e){if(e.desktop)return;await x(y(e.projectDir,"apps/tauri"),{recursive:!0});let t=y(e.projectDir,"packages/i18n/translations");for(let n of await hn(t,{withFileTypes:!0}))n.isDirectory()&&await x(y(t,n.name,"desktop.json"),{force:!0});await x(y(e.projectDir,".github/workflows/tauri-release.yml"))}function C(e,t,n,r){let i=e.indexOf(t);if(i===-1)throw new Error(`stripDesktopAi: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(e.indexOf(t,i+t.length)!==-1)throw new Error(`stripDesktopAi: the ${r} seam appears more than once (boilerplate drift).`);return e.slice(0,i)+n+e.slice(i+t.length)}async function Mr(e){if(!e.desktop||e.desktopAi)return;let t=e.projectDir;await x(y(t,"apps/tauri/sidecar"),{recursive:!0}),await x(y(t,"apps/tauri/tsconfig.sidecar.json")),await x(y(t,"apps/tauri/tsup.sidecar.config.ts")),await x(y(t,"apps/tauri/tests/sidecar"),{recursive:!0}),await x(y(t,"apps/tauri/src-tauri/src/daemon.rs")),await x(y(t,"apps/tauri/scripts/stage-sidecar.mjs")),await x(y(t,"apps/tauri/scripts/sign-nested.mjs")),await x(y(t,"apps/tauri/resources/ai-skills"),{recursive:!0}),await x(y(t,"apps/tauri/src-tauri/resources"),{recursive:!0,force:!0});for(let s of["apps/tauri/src/screens/agents","apps/tauri/src/screens/integrations","apps/tauri/src/screens/ai","apps/tauri/src/screens/schedules.tsx","apps/tauri/src/hooks/use-ai.ts","apps/tauri/src/hooks/use-ai-chat.ts","apps/tauri/src/hooks/use-ai-resources.ts","apps/tauri/src/hooks/use-ai-scope.ts","apps/tauri/src/hooks/use-ai-terminal.ts","apps/tauri/src/hooks/use-xterm.ts","apps/tauri/src/hooks/use-async-resource.ts","apps/tauri/src/lib/ai.ts","apps/tauri/src/lib/ai-tab-state.ts","apps/tauri/src/lib/chat-prefs.ts","apps/tauri/src/lib/side-panel-state.ts","apps/tauri/src/lib/task-settings-sync.ts","apps/tauri/src/lib/bridge/ai.ts","apps/tauri/src/lib/bridge/events.ts","apps/tauri/src/lib/bridge/http.ts","apps/tauri/src/lib/bridge/wire-types.ts","apps/tauri/src/lib/bridge/control-info.ts","apps/tauri/src/lib/bridge/status.ts","apps/tauri/src/lib/bridge/types.ts","apps/tauri/src/lib/bridge/deps.ts","apps/tauri/src/components/side-panel-dock.tsx","apps/tauri/src/components/side-panel.tsx","apps/tauri/src/config/side-panels.tsx"])await x(y(t,s),{recursive:!0});for(let s of["apps/tauri/tests/ai-import-boundary.test.ts","apps/tauri/tests/bridge/ai-surface.test.ts","apps/tauri/tests/bridge/control-info.test.ts","apps/tauri/tests/bridge/events.test.ts","apps/tauri/tests/bridge/http.test.ts","apps/tauri/tests/bridge/reconnect.test.ts","apps/tauri/tests/renderer/lib/ai.test.ts","apps/tauri/tests/renderer/lib/ai-tab-state.test.ts","apps/tauri/tests/renderer/lib/chat-prefs.test.ts","apps/tauri/tests/renderer/lib/side-panel-state.test.ts","apps/tauri/tests/renderer/lib/task-settings-sync.test.ts","apps/tauri/tests/renderer/terminal-tools.test.ts","apps/tauri/tests/renderer/use-model-picker.test.ts"])await x(y(t,s));let n=y(t,"apps/tauri/package.json"),r=JSON.parse(await $(n,"utf-8")),i=["@repo/ai","@repo/agent-runtime","@homebridge/node-pty-prebuilt-multiarch","@xterm/xterm","@xterm/addon-fit","ws","@hono/node-server"];for(let s of i){if(!r.dependencies||!(s in r.dependencies))throw new Error(`stripDesktopAi: expected ${s} in apps/tauri dependencies (boilerplate drift).`);delete r.dependencies[s]}for(let s of["@types/ws","tsup"]){if(!r.devDependencies||!(s in r.devDependencies))throw new Error(`stripDesktopAi: expected ${s} in apps/tauri devDependencies (boilerplate drift).`);delete r.devDependencies[s]}if(!r.scripts||!("sidecar:stage"in r.scripts))throw new Error("stripDesktopAi: expected the sidecar:stage script in apps/tauri package.json (boilerplate drift).");if(delete r.scripts["sidecar:stage"],r.scripts["check-types"]!=="tsc -p tsconfig.json --noEmit && tsc -p tsconfig.sidecar.json --noEmit")throw new Error("stripDesktopAi: expected the two-tsconfig check-types script in apps/tauri package.json (boilerplate drift).");r.scripts["check-types"]="tsc -p tsconfig.json --noEmit",await l(n,JSON.stringify(r,null,2)+`
1132
+ `),await fs(t);let o=y(t,"packages/i18n/translations");for(let s of await hn(o,{withFileTypes:!0})){if(!s.isDirectory())continue;let a=y(o,s.name,"desktop.json"),d=await $(a,"utf-8").catch(()=>null);if(d===null)continue;let m=JSON.parse(d),p=!1;for(let f of["agents","ai_hub","schedules","integrations"])f in m&&(delete m[f],p=!0);p&&await l(a,JSON.stringify(m,null," ")+`
1133
+ `)}}var as=`/**
1134
+ * Assembles a full bridge over the injected {@link BridgeDeps} seams. Wires the control-info source,
1135
+ * the engine HTTP transport, the shared status store, the event hub, the host auth-token sync, the
1136
+ * native surface (registering the reconnect auth resync via the hub), and the ai surface (folding in
1137
+ * the native workspace picker). The four \`@tauri-apps\` primitives are injected so a bridge can be built
1138
+ * against fake transports in tests; this factory imports the real plugin functions directly, which the
1139
+ * shell webview satisfies.
1140
+ *
1141
+ * @param deps - The \`fetch\`, \`WebSocket\`, \`invoke\`, and \`listen\` seams.
1142
+ * @returns The assembled bridge and its status store.
1143
+ */
1144
+ export function createBridge(deps: BridgeDeps): { bridge: Bridge; status: StatusStore } {
1145
+ const clientId = crypto.randomUUID()
1146
+ const source = createControlSource(deps)
1147
+ const http = createEngineHttp({ source, fetchFn: deps.fetchFn, clientId })
1148
+ const status = createStatusStore()
1149
+ const events = createEngineEvents({
1150
+ source,
1151
+ http,
1152
+ WebSocketCtor: deps.WebSocketCtor,
1153
+ clientId,
1154
+ status
1155
+ })
1156
+ const hostAuthSync = createHostAuthSync({ source, fetchFn: deps.fetchFn, clientId })
1157
+ const { native, pickWorkspace } = createNativeBridge({
1158
+ invoke: deps.invoke,
1159
+ listen: deps.listen,
1160
+ openUrl,
1161
+ isPermissionGranted,
1162
+ requestPermission,
1163
+ sendNotification: (options) => sendNotification(options),
1164
+ checkUpdate: () => check(),
1165
+ relaunch,
1166
+ openDialog: (options) => open(options),
1167
+ hostAuthSync,
1168
+ registerAuthResync: events.syncAuthToken,
1169
+ isDev: import.meta.env.DEV
1170
+ })
1171
+ const ai = createAiBridge({ http, events, pickWorkspace })
1172
+ return { bridge: { ...native, ai }, status }
1173
+ }`,cs=`/**
1174
+ * Assembles the native bridge over the injected Tauri command/event seams. The \`invoke\` and \`listen\`
1175
+ * primitives are injected so a bridge can be built against fakes in tests; this factory imports the
1176
+ * real plugin functions (opener / notification / updater / process / dialog) directly, which the
1177
+ * shell webview satisfies.
1178
+ *
1179
+ * @param deps - The \`invoke\` and \`listen\` seams.
1180
+ * @returns The assembled native bridge.
1181
+ */
1182
+ export function createBridge(deps: {
1183
+ invoke: <T>(cmd: string, args?: Record<string, unknown>) => Promise<T>
1184
+ listen: (event: string, handler: (event: { payload: unknown }) => void) => Promise<() => void>
1185
+ }): { bridge: Bridge } {
1186
+ const { native } = createNativeBridge({
1187
+ invoke: deps.invoke,
1188
+ listen: deps.listen,
1189
+ openUrl,
1190
+ isPermissionGranted,
1191
+ requestPermission,
1192
+ sendNotification: (options) => sendNotification(options),
1193
+ checkUpdate: () => check(),
1194
+ relaunch,
1195
+ openDialog: (options) => open(options),
1196
+ isDev: import.meta.env.DEV
1197
+ })
1198
+ return { bridge: native }
1199
+ }`,ls=`/** The four production seams: \`globalThis\` fetch/WebSocket + the real Tauri command/event primitives. */
1200
+ function productionDeps(): BridgeDeps {
1201
+ return {
1202
+ fetchFn: (input, init) => fetch(input, init),
1203
+ WebSocketCtor: WebSocket,
1204
+ invoke,
1205
+ listen: (event, handler) => tauriListen(event, handler)
1206
+ }
1207
+ }
1208
+
1209
+ let instance: { bridge: Bridge; status: StatusStore } | null = null
1210
+
1211
+ /** Builds the production bridge exactly once, on first use (never at module load). */
1212
+ function productionInstance(): { bridge: Bridge; status: StatusStore } {
1213
+ if (!instance) instance = createBridge(productionDeps())
1214
+ return instance
1215
+ }
1216
+
1217
+ /**
1218
+ * Forwards every property access to a lazily-built target, so importing this module triggers no
1219
+ * \`invoke\` / \`listen\` / socket work (the control source subscribes to Tauri events at construction).
1220
+ * The first property access builds and memoizes the instance; every later access returns the same
1221
+ * member (stable identities, so \`useSyncExternalStore(bridgeStatus.subscribe, ...)\` does not tear).
1222
+ */
1223
+ function lazyForward<T extends object>(build: () => T): T {
1224
+ return new Proxy(Object.create(null) as T, {
1225
+ get: (_target, prop) => (build() as Record<PropertyKey, unknown>)[prop]
1226
+ })
1227
+ }
1228
+
1229
+ /** The production bridge singleton, lazily built on first property access. */
1230
+ export const bridge: Bridge = lazyForward(() => productionInstance().bridge)
1231
+
1232
+ /** The production status store feeding the reconnect indicator. */
1233
+ export const bridgeStatus: StatusStore = lazyForward(() => productionInstance().status)`,ps=`/** The two production seams: the real Tauri command/event primitives. */
1234
+ function productionDeps(): {
1235
+ invoke: <T>(cmd: string, args?: Record<string, unknown>) => Promise<T>
1236
+ listen: (event: string, handler: (event: { payload: unknown }) => void) => Promise<() => void>
1237
+ } {
1238
+ return {
1239
+ invoke,
1240
+ listen: (event, handler) => tauriListen(event, handler)
1241
+ }
1242
+ }
1243
+
1244
+ let instance: { bridge: Bridge } | null = null
1245
+
1246
+ /** Builds the production bridge exactly once, on first use (never at module load). */
1247
+ function productionInstance(): { bridge: Bridge } {
1248
+ if (!instance) instance = createBridge(productionDeps())
1249
+ return instance
1250
+ }
1251
+
1252
+ /**
1253
+ * Forwards every property access to a lazily-built target, so importing this module triggers no
1254
+ * \`invoke\` / \`listen\` work. The first property access builds and memoizes the instance; every later
1255
+ * access returns the same member (stable identities).
1256
+ */
1257
+ function lazyForward<T extends object>(build: () => T): T {
1258
+ return new Proxy(Object.create(null) as T, {
1259
+ get: (_target, prop) => (build() as Record<PropertyKey, unknown>)[prop]
1260
+ })
1261
+ }
1262
+
1263
+ /** The production bridge singleton, lazily built on first property access. */
1264
+ export const bridge: Bridge = lazyForward(() => productionInstance().bridge)`,ds=`/// The control-server coordinates the renderer needs: the loopback URL (absent until the
1265
+ /// sidecar reports ready) and the bearer token (always present, minted at shell startup).
1266
+ #[derive(serde::Serialize)]
1267
+ struct ControlInfo {
1268
+ url: Option<String>,
1269
+ token: String,
1270
+ }
1271
+
1272
+ /// Returns the current control-server URL and bearer. Callable before the sidecar is ready
1273
+ /// (\`url\` is \`None\` until then; \`token\` is always the minted control token).
1274
+ #[tauri::command]
1275
+ fn get_control_info(state: tauri::State<'_, daemon::DaemonHandle>) -> ControlInfo {
1276
+ let guard = state.lock().unwrap_or_else(|poisoned| poisoned.into_inner());
1277
+ ControlInfo {
1278
+ url: guard.url.clone(),
1279
+ token: guard.control_token.clone(),
1280
+ }
1281
+ }
1282
+
1283
+ `,us="//! Long-lived secret storage for the shell's two secrets: the app bearer token\n//! (set on sign-in, cleared on sign-out) and the engine's AES-256-GCM master key\n//! (created once on first run). Both ride the stdin handshake to the sidecar;\n//! neither is ever passed on argv or in the environment.\n//!\n//! Packaged (release) builds store both in the OS credential store (macOS\n//! Keychain, Windows Credential Manager, Linux Secret Service) under the app\n//! identifier as the service name (`tauri.conf.json`'s `identifier`, which the\n//! CLI and `sync-identity.mjs` rewrite on a rebrand, so rebranded apps never\n//! share entries), users `auth-token` and `engine-master-key`.",ms="//! Long-lived secret storage for the app bearer token (set on sign-in, cleared\n//! on sign-out). It is never passed on argv or in the environment.\n//!\n//! Packaged (release) builds store it in the OS credential store (macOS\n//! Keychain, Windows Credential Manager, Linux Secret Service) under the app\n//! identifier as the service name (`tauri.conf.json`'s `identifier`, which the\n//! CLI and `sync-identity.mjs` rewrite on a rebrand, so rebranded apps never\n//! share entries), user `auth-token`.";async function fs(e){let t=y(e,"apps/tauri/src/components/shell.tsx");await l(t,F(await $(t,"utf-8"),"components/shell.tsx"));let n=y(e,"apps/tauri/src/components/sidebar/app-sidebar.tsx"),r=F(await $(n,"utf-8"),"components/sidebar/app-sidebar.tsx");r=C(r,"import { useCallback, useMemo, useSyncExternalStore } from 'react'","import { useCallback, useMemo } from 'react'","app-sidebar useSyncExternalStore import"),await l(n,r);let i=y(e,"apps/tauri/src/config/sidebar.ts"),o=F(await $(i,"utf-8"),"config/sidebar.ts");o=C(o,`import {
1154
1284
  BuildingsIcon,
1155
1285
  GearIcon,
1156
1286
  HouseIcon,
1157
1287
  RobotIcon,
1158
1288
  UserCircleIcon
1159
- } from '@phosphor-icons/react'`,"import { BuildingsIcon, GearIcon, HouseIcon, UserCircleIcon } from '@phosphor-icons/react'","sidebar icon imports"),I=J(I,"config/sidebar.ts"),await l(b,I);let z=h(e,"apps/desktop/src/renderer/src/lib/config.ts"),L=await j(z,"utf-8");L=J(L,"lib/config.ts"),L=L.replace(/,(\n\} as const)/,"$1"),await l(z,L);let K=h(e,"apps/desktop/src/renderer/src/lib/sidebar-flags.ts"),ge=J(await j(K,"utf-8"),"lib/sidebar-flags.ts");await l(K,ge);let Y=h(e,"apps/desktop/electron.vite.config.ts"),k=await j(Y,"utf-8");k=M(k,",\n // The local-embeddings worker (`embeddings.ts`) spawns `embeddings-worker.js`,\n // which must sit next to the main `index.js`. Declaring both as named rollup\n // inputs emits `out/main/index.js` (the app entry) and\n // `out/main/embeddings-worker.js` (the worker) as `[name].js`, so the host's\n // `join(__dirname, 'embeddings-worker.js')` resolves in dev and packaged builds.\n rollupOptions: {\n // `@huggingface/transformers` loads its model runtime from `onnxruntime-node`,\n // a native addon that resolves its `.node` binding with a dynamic\n // `require('../bin/napi-v6/<platform>/onnxruntime_binding.node')`. A native\n // addon cannot be Rollup-bundled, so both packages stay external and load from\n // `node_modules` at runtime; electron-builder ships their trees (see\n // `electron-builder.mjs` `files`/`asarUnpack`). The embedded-terminal login flow\n // adds `@homebridge/node-pty-prebuilt-multiarch`, also a native addon (its\n // `pty.node` binding), kept external for the same reason. The CLI strips this whole\n // rollup block for an AI-off desktop build (the worker is removed with it).\n external: [\n '@huggingface/transformers',\n 'onnxruntime-node',\n '@homebridge/node-pty-prebuilt-multiarch'\n ],\n input: {\n index: resolve('src/main/index.ts'),\n 'embeddings-worker': resolve('src/main/ai/embeddings-worker.ts')\n }\n }","","electron.vite.config rollup worker block"),await l(Y,k);let R=h(e,"apps/desktop/electron-builder.mjs"),P=await j(R,"utf-8");P=M(P," // The main, preload, and renderer are self-contained bundles (electron-vite with\n // build.externalizeDeps:false), so the packaged app needs almost ZERO runtime\n // node_modules: exclude them all by default to keep the thin client small (the\n // backend dependency trees `@repo/api` drags in - express, pg, aws-sdk - are never\n // `require`d at runtime once bundled). Then RE-INCLUDE only the trees the local\n // embeddings worker keeps external (the native ONNX runtime can't be Rollup-bundled).\n // The worker `require`s `@huggingface/transformers`, whose Node build eagerly, at\n // import, pulls in `onnxruntime-node` (its prebuilt `.node` binding) + the shared\n // `onnxruntime-common`, AND `sharp` (a top-level `require(\"sharp\")` in its image\n // util that runs even for text-only embedding); `sharp` in turn needs its `@img/*`\n // platform natives plus `detect-libc` and `semver` at load. All of these must ship\n // or the worker import throws and semantic search silently degrades to BM25. Each\n // glob matches against electron-builder's production-dependency collection, which\n // flattens pnpm's `.pnpm` virtual store into the packaged `node_modules/<name>`\n // (following symlinks) - so transitive names resolve even though, under pnpm's\n // isolated linker, only `@huggingface/transformers` is linked at the app's own\n // node_modules and the rest live in `.pnpm`. The embedded-terminal login flow adds\n // `@homebridge/node-pty-prebuilt-multiarch` (its prebuilt `pty.node` binding); like the\n // ONNX runtime it cannot be Rollup-bundled, so its tree is re-included here too (the\n // `**/*.node` `asarUnpack` glob already unpacks `pty.node`). The CLI strips every\n // re-include for an AI-off desktop build (there is no external runtime to collect). The\n // `KB_SMOKE`-gated packaged-embedding test guards against this closure drifting.\n files: [\n 'out/**',\n 'resources/**',\n 'package.json',\n '!node_modules/**/*',\n 'node_modules/@huggingface/transformers/**/*',\n 'node_modules/onnxruntime-node/**/*',\n 'node_modules/onnxruntime-common/**/*',\n 'node_modules/sharp/**/*',\n 'node_modules/@img/**/*',\n 'node_modules/detect-libc/**/*',\n 'node_modules/semver/**/*',\n 'node_modules/@homebridge/node-pty-prebuilt-multiarch/**/*'\n ],",` // The main, preload, and renderer are self-contained bundles (electron-vite with
1160
- // build.externalizeDeps:false), so the packaged app ships ZERO runtime node_modules
1161
- // (every dependency is Rollup-bundled): keep only the built output, the resources,
1162
- // and the package.json, and exclude node_modules entirely.
1163
- files: ['out/**', 'resources/**', 'package.json', '!node_modules/**/*'],`,"electron-builder files re-includes"),P=M(P,"'resources/**', '**/*.node'","'resources/**'","electron-builder asarUnpack entry"),await l(R,P)}import{readFile as na}from"fs/promises";import{join as ra}from"path";var jr=`on:
1289
+ } from '@phosphor-icons/react'`,"import { BuildingsIcon, GearIcon, HouseIcon, UserCircleIcon } from '@phosphor-icons/react'","sidebar icon imports"),await l(i,o);let s=y(e,"apps/tauri/src/lib/config.ts"),a=F(await $(s,"utf-8"),"lib/config.ts");a=a.replace(/,(\n\} as const)/,"$1"),await l(s,a);let d=y(e,"apps/tauri/src/lib/sidebar-flags.ts");await l(d,F(await $(d,"utf-8"),"lib/sidebar-flags.ts"));let m=y(e,"apps/tauri/src/router.tsx"),p=F(await $(m,"utf-8"),"router.tsx");p=C(p,`import { clientConfig } from '@/lib/config'
1290
+ `,"","router clientConfig import"),p=C(p,` createRouter,
1291
+ redirect
1292
+ } from '@tanstack/react-router'`,` createRouter
1293
+ } from '@tanstack/react-router'`,"router redirect import specifier"),p=C(p,`import { AiHubScreen } from '@/screens/ai'
1294
+ `,"","router AiHubScreen import"),p=C(p,` ...(clientConfig.agentsEnabled ? [aiRoute, agentsRoute, schedulesRoute, integrationsRoute] : []),
1295
+ `,"","router ai route spread"),await l(m,p);let f=y(e,"apps/tauri/src/lib/bridge/index.ts"),w=F(await $(f,"utf-8"),"lib/bridge/index.ts");w=C(w,`/**
1296
+ * The complete public bridge: the app's full native + AI call surface, assembled from three transports
1297
+ * (engine HTTP, the event socket, native Tauri commands/plugins). The renderer imports \`bridge\` as a
1298
+ * module and derives its types from \`typeof bridge\`.
1299
+ */
1300
+ export interface Bridge extends NativeBridgeParts {
1301
+ /** The AI tool-orchestration surface (present regardless of the feature flag). */
1302
+ ai: AiBridge
1303
+ }`,"/**\n * The complete public bridge: the app's full native call surface (native Tauri commands + plugins). The\n * renderer imports `bridge` as a module and derives its types from `typeof bridge`.\n */\nexport type Bridge = NativeBridgeParts","bridge Bridge interface"),w=C(w,as,cs,"bridge createBridge factory"),w=C(w,ls,ps,"bridge singleton tail"),await l(f,w);let b=y(e,"apps/tauri/src/lib/bridge/native.ts"),A=F(await $(b,"utf-8"),"lib/bridge/native.ts");A=C(A," /** Securely persists the Bearer token via the OS keychain, then syncs the running sidecar. */"," /** Securely persists the Bearer token via the OS keychain. */","native setToken jsdoc"),A=C(A," /** Removes the stored token (sign-out) and clears it on the running sidecar. */"," /** Removes the stored token (sign-out). */","native clearToken jsdoc"),A=C(A," Assembles the auth keyring\n * triplet (dual-writing the running sidecar on set/clear and registering the reconnect resync), the\n * guarded `openExternal`,"," Assembles the auth keyring\n * triplet, the guarded `openExternal`,","native createNativeBridge jsdoc"),await l(b,A);let J=y(e,"apps/tauri/tests/bridge/native.test.ts");await l(J,F(await $(J,"utf-8"),"tests/bridge/native.test.ts"));let V=y(e,"apps/tauri/src-tauri/src/lib.rs"),R=await $(V,"utf-8");R=C(R,`mod daemon;
1304
+ `,"","lib.rs mod daemon"),R=C(R,ds,"","lib.rs get_control_info command"),R=C(R,` get_control_info,
1305
+ `,"","lib.rs get_control_info handler registration"),R=C(R,` let handle = app.handle().clone();
1306
+ `,"","lib.rs handle binding"),R=C(R,` if let Err(err) = daemon::init(&handle) {
1307
+ eprintln!("[shell] sidecar init failed: {err}");
1308
+ }
1309
+ `,"","lib.rs daemon::init call"),R=C(R," let dl_handle = handle.clone();"," let dl_handle = app.handle().clone();","lib.rs macos deep-link handle"),R=C(R,` .run(|app_handle, event| {
1310
+ if let tauri::RunEvent::Exit = event {
1311
+ daemon::shutdown(app_handle);
1312
+ }
1313
+ });`," .run(|_app_handle, _event| {});","lib.rs daemon::shutdown exit hook"),await l(V,R);let ae=y(e,"apps/tauri/src-tauri/src/keyring_store.rs"),B=await $(ae,"utf-8");B=C(B,us,ms,"keyring_store module doc"),B=F(B,"src-tauri/src/keyring_store.rs"),await l(ae,B);let v=y(e,"apps/tauri/src-tauri/capabilities/default.json"),P=JSON.parse(await $(v,"utf-8")),_=P.permissions.length;if(P.permissions=P.permissions.filter(T=>T!=="dialog:default"),P.permissions.length===_)throw new Error("stripDesktopAi: expected the dialog:default capability in capabilities/default.json (boilerplate drift).");await l(v,JSON.stringify(P,null,2)+`
1314
+ `);let z=y(e,"apps/tauri/src-tauri/tauri.conf.json"),I=JSON.parse(await $(z,"utf-8"));if(!I.bundle)throw new Error("stripDesktopAi: expected a bundle block in tauri.conf.json (boilerplate drift).");if(we(I.bundle,"externalBin","the tauri.conf bundle.externalBin key","stripDesktopAi"),we(I.bundle,"resources","the tauri.conf bundle.resources key","stripDesktopAi"),!I.build||I.build.beforeDevCommand!=="pnpm sidecar:stage && pnpm dev:vite")throw new Error("stripDesktopAi: expected the sidecar-staged beforeDevCommand in tauri.conf.json (boilerplate drift).");if(I.build.beforeBuildCommand!=="pnpm sidecar:stage && pnpm build:vite")throw new Error("stripDesktopAi: expected the sidecar-staged beforeBuildCommand in tauri.conf.json (boilerplate drift).");I.build.beforeDevCommand="node scripts/sync-identity.mjs && pnpm dev:vite",I.build.beforeBuildCommand="node scripts/sync-identity.mjs && pnpm build:vite",await l(z,JSON.stringify(I,null,2)+`
1315
+ `)}import{readFile as gs}from"fs/promises";import{join as hs}from"path";var Vr=`on:
1164
1316
  workflow_run:
1165
1317
  workflows: ["CI"]
1166
1318
  branches: [main]
1167
1319
  types: [completed]
1168
- workflow_dispatch:`,oa=`on:
1320
+ workflow_dispatch:`,ys=`on:
1169
1321
  # Automatic release on CI success is disabled for this project to conserve
1170
1322
  # GitHub Actions minutes. Re-enable by uncommenting the workflow_run trigger.
1171
1323
  # workflow_run:
1172
1324
  # workflows: ["CI"]
1173
1325
  # branches: [main]
1174
1326
  # types: [completed]
1175
- workflow_dispatch:`;async function Ur(e){if(!e.desktop||e.desktopAutoRelease)return;let t=ra(e.projectDir,".github/workflows/desktop-release.yml"),n=await na(t,"utf8");if(!n.includes(jr))throw new Error(`Cannot make desktop releases manual: the expected workflow_run trigger block was not found in ${t}. The boilerplate workflow may have drifted.`);await l(t,n.replace(jr,oa))}import{join as ia}from"path";async function Mr(e){let t=aa(e);await l(ia(e.projectDir,".github/workflows/ci.yml"),t)}function aa(e){let t=G[e.databaseProvider].managed,n=e.cacheProvider==="upstash",r=e.frontend==="nuxt",o=t?"":` services:
1327
+ workflow_dispatch:`;async function Br(e){if(!e.desktop||e.desktopAutoRelease)return;let t=hs(e.projectDir,".github/workflows/tauri-release.yml"),n=await gs(t,"utf8");if(!n.includes(Vr))throw new Error(`Cannot make desktop releases manual: the expected workflow_run trigger block was not found in ${t}. The boilerplate workflow may have drifted.`);await l(t,n.replace(Vr,ys))}import{join as vs}from"path";async function Fr(e){let t=bs(e);await l(vs(e.projectDir,".github/workflows/ci.yml"),t)}function bs(e){let t=Y[e.databaseProvider].managed,n=e.cacheProvider==="upstash",r=e.frontend==="nuxt",i=t?"":` services:
1176
1328
  postgres:
1177
- image: pgvector/pgvector:pg18
1329
+ image: postgres:18-alpine
1178
1330
  env:
1179
1331
  POSTGRES_USER: postgres
1180
1332
  POSTGRES_PASSWORD: postgres
@@ -1186,14 +1338,14 @@ resources/models/
1186
1338
  --health-interval 10s
1187
1339
  --health-timeout 5s
1188
1340
  --health-retries 5
1189
- `,i=t?"postgres://test:test@localhost:5432/saas_test":"postgres://postgres:postgres@localhost:5432/saas",a=n?`
1341
+ `,o=t?"postgres://test:test@localhost:5432/saas_test":"postgres://postgres:postgres@localhost:5432/saas",s=n?`
1190
1342
  UPSTASH_REDIS_REST_URL: https://test.upstash.io
1191
- UPSTASH_REDIS_REST_TOKEN: test-token`:"",s=(()=>{switch(e.paymentProvider){case"stripe":return`
1343
+ UPSTASH_REDIS_REST_TOKEN: test-token`:"",a=(()=>{switch(e.paymentProvider){case"stripe":return`
1192
1344
  STRIPE_SECRET_KEY: test
1193
1345
  STRIPE_WEBHOOK_SECRET: test`;case"polar":return`
1194
1346
  POLAR_ACCESS_TOKEN: test
1195
- POLAR_WEBHOOK_SECRET: test`;case"none":return"";default:{let d=e.paymentProvider;throw new Error(`buildCiYaml: unhandled payment provider "${String(d)}"`)}}})(),p=e.socialProviders.map(d=>se[d].envVars.map(v=>`
1196
- ${v.name}: test`).join("")).join("");return`# Deployment is handled by the hosting platform (Vercel, Coolify, etc.)
1347
+ POLAR_WEBHOOK_SECRET: test`;case"none":return"";default:{let f=e.paymentProvider;throw new Error(`buildCiYaml: unhandled payment provider "${String(f)}"`)}}})(),d=e.socialProviders.map(f=>ce[f].envVars.map(w=>`
1348
+ ${w.name}: test`).join("")).join("");return`# Deployment is handled by the hosting platform (Vercel, Coolify, etc.)
1197
1349
  # which auto-deploys on push. CI runs in parallel as a quality gate.
1198
1350
  # For PR-based workflows, enable GitHub branch protection to require CI before merging.
1199
1351
 
@@ -1217,8 +1369,8 @@ jobs:
1217
1369
  name: Checks
1218
1370
  runs-on: ubuntu-latest
1219
1371
  timeout-minutes: 20
1220
- ${o} env:
1221
- CONTENT_API_KEY: test-contentapi-key-16chars${a}${s}${p}
1372
+ ${i} env:
1373
+ CONTENT_API_KEY: test-contentapi-key-16chars${s}${a}${d}
1222
1374
  STORAGE_REGION: test
1223
1375
  STORAGE_ENDPOINT: http://test
1224
1376
  STORAGE_ACCESS_KEY_ID: test
@@ -1239,49 +1391,49 @@ ${r?` # vue-tsc on web-nuxt OOMs on the GitHub runner's default heap once
1239
1391
  NODE_OPTIONS: --max-old-space-size=6144`:" - run: pnpm check-types"}
1240
1392
 
1241
1393
  - name: Write root env
1242
- run: echo "DATABASE_URL=${i}" > .env
1394
+ run: echo "DATABASE_URL=${o}" > .env
1243
1395
 
1244
1396
  - run: pnpm test
1245
- `}import{readFile as Vr}from"fs/promises";import{existsSync as sa}from"fs";import{join as gn}from"path";var Fr="@repo/database";function ca(e){return e?"pnpm -F @repo/database reset && pnpm -F @repo/database run deploy -- --push":"pnpm -F @repo/database run deploy"}function la(e,t){switch(e){case"fullstack":return t==="nextjs"?"web-next":"web-nuxt";case"separate":return"backend";default:{let n=e;throw new Error(`schemaOwnerApp: unhandled architecture "${String(n)}"`)}}}async function pa(e,t,n){let r=await Vr(e,"utf-8"),o=JSON.parse(r),i=o.scripts?.[t];if(!i)throw new Error(`Cannot prepend to missing script "${t}" in ${e}`);i.includes(Fr)||(o.scripts={...o.scripts,[t]:`${n} && ${i}`},await l(e,JSON.stringify(o,null," ")+`
1246
- `))}async function da(e,t){let n=sa(e)?JSON.parse(await Vr(e,"utf-8")):{$schema:"https://openapi.vercel.sh/vercel.json"},r=n.buildCommand?.trim()||"pnpm build";r.includes(Fr)||(n.buildCommand=`${t} && ${r}`,await l(e,JSON.stringify(n,null," ")+`
1247
- `))}async function Br(e){let t=ca(e.demo===!0),n=la(e.architecture,e.frontend),r=gn(e.projectDir,"apps",n);switch(e.deploymentTarget){case"node":await pa(gn(r,"package.json"),"start",t);return;case"vercel":await da(gn(r,"vercel.json"),t);return;default:{let o=e.deploymentTarget;throw new Error(`generateDeployScripts: unhandled deployment target "${String(o)}"`)}}}import{readFile as ua}from"fs/promises";import{existsSync as ma}from"fs";import{join as $t}from"path";var fa=["stripe","polar"];async function Kr(e){let t=$t(e.projectDir,"packages/payments/src"),n=e.paymentProvider,r=`// Active payment provider. To switch, change the path below to
1397
+ `}import{readFile as Kr}from"fs/promises";import{existsSync as ks}from"fs";import{join as yn}from"path";var Gr="@repo/database";function ws(e){return e?"pnpm -F @repo/database reset && pnpm -F @repo/database run deploy -- --push":"pnpm -F @repo/database run deploy"}function Ss(e,t){switch(e){case"fullstack":return t==="nextjs"?"web-next":"web-nuxt";case"separate":return"backend";default:{let n=e;throw new Error(`schemaOwnerApp: unhandled architecture "${String(n)}"`)}}}async function Es(e,t,n){let r=await Kr(e,"utf-8"),i=JSON.parse(r),o=i.scripts?.[t];if(!o)throw new Error(`Cannot prepend to missing script "${t}" in ${e}`);o.includes(Gr)||(i.scripts={...i.scripts,[t]:`${n} && ${o}`},await l(e,JSON.stringify(i,null," ")+`
1398
+ `))}async function As(e,t){let n=ks(e)?JSON.parse(await Kr(e,"utf-8")):{$schema:"https://openapi.vercel.sh/vercel.json"},r=n.buildCommand?.trim()||"pnpm build";r.includes(Gr)||(n.buildCommand=`${t} && ${r}`,await l(e,JSON.stringify(n,null," ")+`
1399
+ `))}async function Hr(e){let t=ws(e.demo===!0),n=Ss(e.architecture,e.frontend),r=yn(e.projectDir,"apps",n);switch(e.deploymentTarget){case"node":await Es(yn(r,"package.json"),"start",t);return;case"vercel":await As(yn(r,"vercel.json"),t);return;default:{let i=e.deploymentTarget;throw new Error(`generateDeployScripts: unhandled deployment target "${String(i)}"`)}}}import{readFile as Is}from"fs/promises";import{existsSync as Ps}from"fs";import{join as Ut}from"path";var Ts=["stripe","polar"];async function zr(e){let t=Ut(e.projectDir,"packages/payments/src"),n=e.paymentProvider,r=`// Active payment provider. To switch, change the path below to
1248
1400
  // "./polar/index" or "./none/index" (other folders are kept in place).
1249
1401
  export { ops } from "./${n}/index";
1250
- `;await l($t(t,"providers/index.ts"),r),await l($t(t,"index.ts"),await ga(t,n))}async function ga(e,t){let n=$t(e,"index.ts");if(!ma(n))throw new Error(`generatePaymentBarrel: expected ${n} to exist - did packages/payments move?`);let r=await ua(n,"utf-8"),o=fa.filter(a=>a!==t);return r.split(`
1251
- `).filter(a=>!o.some(s=>a.includes(`./providers/${s}/`))).join(`
1252
- `)}import{readdir as ha,readFile as ya}from"fs/promises";import{join as Gr}from"path";async function Hr(e){if(e.demo)return;let t=e.appName.trim()||e.projectName,n=JSON.stringify(t).slice(1,-1),r=Gr(e.projectDir,"packages/i18n/translations"),o;try{o=await ha(r)}catch{return}for(let i of o){let a=Gr(r,i,"web.json"),s;try{s=await ya(a,"utf-8")}catch{continue}let p=s.replaceAll("GenerateSaaS",n);p!==s&&await l(a,p)}}import{readFile as va}from"fs/promises";import{join as zr}from"path";var ka=[".nuxt/",".nuxt",".nitro/",".nitro",".output/",".output","_locales/"],wa=[".next/",".next",".svelte-kit/",".svelte-kit",".wrangler/",".wrangler",".dev.vars"];async function qr(e){let n=e.frontend==="nuxt"?wa:ka;await Yr(zr(e.projectDir,".gitignore"),n),await Yr(zr(e.projectDir,".dockerignore"),n)}async function Yr(e,t){let n;try{n=await va(e,"utf-8")}catch{return}let r=new Set(t),o=n.split(`
1253
- `).filter(i=>!r.has(i.trim()));o.length!==n.split(`
1254
- `).length&&await l(e,o.join(`
1255
- `))}async function jt(e){let t=e.projectDir;e.demo||(await Wn(t),await Xn(t),await Zn(t)),await Qn(t,e.aiTools),await er(t,e.frontend),await nr(e),await rr(e),await or(e),e.demo||await ir(e),await cr(e);let n=await lr(e);return await pr(e),await dr(e),await ur(e),await mr(e),await fr(e),await gr(e),await kr(e),await wr(e),await Er(e),await Ir(e),await _r(e),await Mr(e),await Or(e),await xr(e),await Cr(e),await Dr(e),await Nr(e),await Lr(e),await $r(e),await Ur(e),await ln(e),await dn(e),await mn(e),await Br(e),await Kr(e),await Hr(e),await qr(e),{dockerComposeGenerated:n}}import{basename as Wr,join as Xr,relative as Sa}from"path";import{createHash as Jr}from"crypto";import{readFile as ba}from"fs/promises";async function Ut(e){let t=await ba(e);return Jr("sha256").update(t).digest("hex")}function hn(e){return Jr("sha256").update(e).digest("hex")}var Ea=new Set(["data",q]);function Aa(e){let t=e.split("/");for(let n of t)if(Xt.has(n)||Zt.has(n)||Ea.has(n)||n.startsWith(".env")&&!n.includes("example"))return!0;return!1}function Zr(e,t){return{projectName:e.projectName??Wr(t),appName:e.appName??e.projectName??Wr(t),projectDir:t,frontend:e.frontend==="nextjs"?"nextjs":"nuxt",architecture:e.architecture??"fullstack",paymentProvider:e.paymentProvider??"none",emailProvider:e.emailProvider??"smtp",multiTenancy:e.multiTenancy??!1,billingScope:e.billingScope??"user",blog:e.blog??!1,docs:e.docs??!1,desktop:e.desktop??!1,desktopAutoRelease:e.desktopAutoRelease??!0,desktopAi:e.desktopAi??!1,ai:e.ai??!1,rag:e.rag??!1,companion:e.companion??!1,mcpServer:e.mcpServer??!1,aiByok:e.aiByok??!0,revenueSharing:e.revenueSharing??!1,credits:e.credits??!1,dockerServices:e.dockerServices??[],aiTools:e.aiTools??[],socialProviders:e.socialProviders??[],defaultCurrency:e.defaultCurrency??"USD",deploymentTarget:e.deploymentTarget??"node",databaseProvider:e.databaseProvider??"postgres",cacheProvider:e.cacheProvider??"redis",version:e.version,baseUrl:e.baseUrl,credentials:{},demo:!1}}function Ia(e,t){return{version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",appName:e.appName,projectName:e.projectName,frontend:e.frontend,architecture:e.architecture,paymentProvider:e.paymentProvider,emailProvider:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,desktopAutoRelease:e.desktopAutoRelease,desktopAi:e.desktopAi,ai:e.ai,rag:e.rag,companion:e.companion,mcpServer:e.mcpServer,aiByok:e.aiByok,credits:e.credits,revenueSharing:e.revenueSharing,defaultCurrency:e.defaultCurrency,dockerServices:e.dockerServices,socialProviders:e.socialProviders,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,aiTools:e.aiTools,...e.baseUrl?{baseUrl:e.baseUrl}:{},...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}}}async function Qr(e,t){let r=(await Te(e.projectDir,e.projectDir,Aa)).sort(),o=await Promise.all(r.map(async s=>[Pe(Sa(e.projectDir,s)),await Ut(s)])),i=Object.fromEntries(o),a=Ia(e,t);await l(Xr(e.projectDir,he),JSON.stringify(a,null," ")+`
1256
- `),await l(Xr(e.projectDir,Mn),JSON.stringify(i,null," ")+`
1257
- `)}import{relative as Pa}from"path";async function We(e){let n=(await Te(e,e,Be)).sort(),r=await Promise.all(n.map(async o=>[Pe(Pa(e,o)),await Ut(o)]));return Object.fromEntries(r)}import{copyFile as Ta,mkdir as Ra,rm as _a}from"fs/promises";import{dirname as Oa,join as eo,relative as xa}from"path";import{existsSync as Ca}from"fs";async function yn(e,t){Ca(t)&&await _a(t,{recursive:!0,force:!0});let n=await Te(e,e,Be);for(let r of n){let o=Pe(xa(e,r)),i=eo(t,o);await Ra(Oa(i),{recursive:!0}),await Ta(r,i)}}async function to(e,t){await yn(e,eo(t,St))}import{existsSync as Da}from"fs";import{readFile as no,readdir as Na}from"fs/promises";import{join as ie,dirname as La,resolve as $a,sep as ja}from"path";import{fileURLToPath as Ua}from"url";var pt={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Id=Object.values(pt),vn="generatesaas-update",ro=La(Ua(import.meta.url));function Ma(){let e=ie(ro,"skill","content");return Da(e)?e:ie(ro,"content")}function kn(e){return!e||e.length===0?[]:e.map(t=>pt[t])}async function wn(e,t,n,r){let o=kn(r);for(let i of o){let a=ie(e,i,vn),s=ie(a,"scripts"),p=ie(a,"references");await Pt(s),await Pt(p),await l(ie(a,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",i)),await l(ie(p,".gitkeep"),"");for(let[f,m]of Object.entries(n)){let d=$a(s,f);d.startsWith(s+ja)&&await l(d,m)}}}async function oo(e,t){let n=Ma(),r=await no(ie(n,"SKILL.md"),"utf-8"),o=ie(n,"scripts"),i=await Na(o),a={};for(let s of i)s!==".gitkeep"&&(a[s]=await no(ie(o,s),"utf-8"));await wn(e,r,a,t)}import{execFile as Va,execFileSync as Fa}from"child_process";import{access as io,readFile as Ba}from"fs/promises";import{join as bn}from"path";import*as D from"@clack/prompts";function Oe(e){try{let t=process.platform==="win32"?"where":"which";return Fa(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function _e(e,t,n,r=3e5){return new Promise((o,i)=>{Va(e,t,{cwd:n,timeout:r,maxBuffer:50*1024*1024},(a,s,p)=>{if(a){let f=String(s||"").trim(),d=[String(p||"").trim(),f].filter(Boolean).join(`
1258
- `);i(new Error(d?`${a.message}
1259
- ${d}`:a.message))}else o()})})}async function ao(e){if(!Oe("pnpm"))return D.log.warn("pnpm not found. Skipping lockfile regeneration."),!1;try{return await _e("pnpm",["install","--lockfile-only","--no-frozen-lockfile","--config.minimumReleaseAge=0"],e),!0}catch(t){let n=t instanceof Error?t.message:String(t);return D.log.warn(`Lockfile regeneration failed: ${n}`),D.log.warn("Deploys using --frozen-lockfile may fail."),!1}}async function so(e){if(!Oe("pnpm"))return D.log.warn("pnpm not found. Skipping dependency installation."),D.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=D.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await _e("pnpm",["install","--config.minimumReleaseAge=0"],e),t.stop("Dependencies installed."),!0}catch(n){t.stop("Dependency installation failed.");let r=n instanceof Error?n.message:String(n);return D.log.warn(`pnpm install failed: ${r}`),D.log.warn("You can run it manually later."),!1}}async function co(e){if(!Oe("pnpm"))return!1;let t=D.spinner();t.start("Generating baseline database migration...");try{return await _e("pnpm",["-F","@repo/database","generate"],e),t.stop("Baseline migration generated."),!0}catch(n){t.stop("Baseline migration generation failed.");let r=n instanceof Error?n.message:String(n);return D.log.warn(`Could not generate baseline migration: ${r}`),D.log.warn("Run 'pnpm -F @repo/database generate' before your first deploy."),!1}}async function lo(e){try{return await io(bn(e,".git")),D.log.info("Git repository already exists, skipping init."),!0}catch{}if(!Oe("git"))return D.log.warn("git not found. Skipping repository initialization."),!1;let t=D.spinner();t.start("Initializing git repository...");try{return await _e("git",["init"],e),await _e("git",["add","-A"],e),await _e("git",["commit","--no-verify","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),D.log.warn("You can run git init manually later."),!1}}async function po(e){if(!Oe("pnpm"))return!1;try{await io(bn(e,".git"))}catch{return!1}try{let t=JSON.parse(await Ba(bn(e,"package.json"),"utf-8")),n=!!t.devDependencies?.["simple-git-hooks"],r=!!t["simple-git-hooks"];if(!n||!r)return!1}catch{return!1}try{return await _e("pnpm",["exec","simple-git-hooks"],e),!0}catch{return D.log.warn("Could not install git hooks. Run 'pnpm exec simple-git-hooks' manually."),!1}}import*as Xe from"@clack/prompts";import Z from"picocolors";function uo(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&Xe.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let n=[];if(n.push(`cd ${e.projectDir}`),t.pnpmInstalled||n.push("pnpm install"),t.dockerComposeGenerated){let i=e.dockerServices.map(a=>De[a].label).join(", ");n.push(`pnpm infra ${Z.dim(`# ${i}`)}`)}if(n.push(`pnpm dev ${Z.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(n.push(""),n.push(Z.dim("Fill in remaining TODO values in .env"))),Xe.note(n.join(`
1260
- `),Z.yellow("Start Development")),t.dockerComposeGenerated){let i=[];i.push(`App ${Z.cyan("http://localhost:3000")}`),e.architecture==="separate"&&i.push(`API ${Z.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&i.push(`Mailpit ${Z.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&i.push(`Inngest ${Z.cyan("http://localhost:8288")}`),Xe.note(i.join(`
1261
- `),Z.yellow("Dev Tools"))}let r=[],o=Ka(e);o.length>0&&r.push(`Set in production: ${Z.dim(o.join(", "))}`),r.push("pnpm db:setup # Enable pgvector + apply the database schema"),r.push(Ga(e)),Xe.note(r.join(`
1262
- `),Z.yellow("Deployment"))}function Ka(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function Ga(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy # Deploy to Vercel"}}import Wa from"picocolors";var Xa="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";async function Za(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(`generatesaas-demo:${e}`)),n=[...new Uint8Array(t).subarray(0,16)].map(r=>r.toString(16).padStart(2,"0")).join("");return`${n.slice(0,8)}-${n.slice(8,12)}-${n.slice(12,16)}-${n.slice(16,20)}-${n.slice(20,32)}`}function Qa(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function mo(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new Q("--frontend <type>","frontend framework").choices([...Ee])).addOption(new Q("--architecture <type>","fullstack or separate").choices([...Ne])).addOption(new Q("--payment <provider>","payment provider").choices([...Le])).addOption(new Q("--email <provider>","email provider").choices([...$e])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new Q("--billing-scope <scope>","billing scope (requires --org)").choices([...Me])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--desktop","include the Electron desktop app (apps/desktop)").option("--no-desktop","exclude the Electron desktop app").option("--desktop-auto","auto-trigger the desktop release workflow on CI success (default: manual-only)").option("--no-desktop-auto","manual-only desktop releases (workflow_dispatch)").option("--desktop-ai","include the desktop AI orchestration layer (requires --desktop)").option("--no-desktop-ai","exclude the desktop AI orchestration layer").option("--ai","include the AI features (chat, models, schedules, integrations); unlocks the companion + MCP server").option("--no-ai","exclude the AI features").option("--rag","include server-side RAG knowledge (pgvector embeddings + semantic search)").option("--no-rag","exclude server-side RAG knowledge").option("--companion","include the companion daemon (apps/companion) + its HTTP transport").option("--no-companion","exclude the companion daemon").option("--mcp-server","include the outward MCP server (the /mcp route + Better Auth mcp() provider)").option("--no-mcp-server","exclude the outward MCP server").option("--ai-byok","AI BYOK mode: end-users bring their own provider key (default)").option("--no-ai-byok","operator-keyed, credit-metered AI platform mode").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new Q("--currency <code>","default currency for billing").choices([...ce])).addOption(new Q("--deploy <target>","deployment target").choices([...le])).addOption(new Q("--database <provider>","database provider").choices([...pe])).addOption(new Q("--cache <provider>","cache provider").choices([...de])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new Q("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new Q("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,n)=>{await es(t?{...n,apiKey:t}:n)})}async function es(e){let t=performance.now();xn("1.20.0");let n,r;try{n=$n(e),r=Qa(e.templateVersion)}catch(k){A.cancel(C(k)),process.exit(1)}let o=A.spinner(),i;try{i=await Fe({apiKey:e.apiKey,prompt:!e.yes})}catch(k){A.cancel(C(k)),process.exit(1)}e.demo&&hn(i)!==Xa&&(A.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let a=fe(i),s=async()=>{let k=await ke(a),R=k.latest,P=r??R;if(r&&!k.versions.some(ae=>ae.version===P))throw new Error(`Template version "${r}" is not available.`);return{latestVersion:R,selectedVersion:P,desktopAllowed:k.entitlements?.desktopAllowed??!0}};o.start("Verifying access...");let p,f,m=!0;try{({latestVersion:p,selectedVersion:f,desktopAllowed:m}=await s()),o.stop("Access verified."),Ie(i)}catch(k){if(o.stop("Access verification failed."),k instanceof U&&k.status===401){e.yes&&(A.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),A.log.warning("Invalid API key."),i=await st(),a=fe(i),o.start("Verifying access...");try{({latestVersion:p,selectedVersion:f,desktopAllowed:m}=await s()),o.stop("Access verified."),Ie(i)}catch(R){o.stop("Access verification failed."),A.cancel(R instanceof U&&R.status===401?"Invalid API key.":C(R)),process.exit(1)}}else A.cancel(C(k)),process.exit(1)}A.log.success(`Latest version: ${p}`),f!==p&&A.log.success(`Using template version: ${f}`),n.desktop===!0&&!m&&(A.cancel("The desktop app is available on the Pro plan and up. Upgrade your plan at generatesaas.com."),process.exit(1));let d;e.yes?d=jn(m?n:{...n,desktop:!1}):d=await Un(n,{desktopAllowed:m});let v;o.start("Activating license...");try{let k=e.demo&&d.baseUrl?await Za(d.baseUrl):crypto.randomUUID(),R=()=>({frontend:d.frontend,version:f,installId:k,projectName:d.projectName,options:Kn(d)}),P;try{P=await Jt(a,R())}catch(ae){let $=Et(ae);if(!$?.lastAllowedVersion)throw ae;o.stop("License activation failed."),e.yes&&(A.cancel(`${$.message} Re-run with --template-version ${$.lastAllowedVersion}.`),process.exit(1));let T=await A.confirm({message:`Your update window has ended. Continue with v${$.lastAllowedVersion} (the last version your license covers)?`});(A.isCancel(T)||!T)&&(A.cancel("Setup cancelled."),process.exit(0)),f=$.lastAllowedVersion,o.start(`Activating license for v${f}...`),P=await Jt(a,R())}v={token:P.token,keyHash:hn(i),installId:P.installId??k},o.stop("License activated.")}catch(k){o.stop("License activation failed."),A.cancel(C(k)),process.exit(1)}let b=Ja(d.projectDir);if(Ha(b)&&za(b).length>0)if(e.yes)A.log.info(`Directory ${b} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let R=await A.select({message:`Directory ${b} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(A.isCancel(R)||R==="cancel")&&(A.cancel("Setup cancelled."),process.exit(0)),R==="overwrite"&&Ya(b,{recursive:!0,force:!0})}let I={...d,projectDir:b,version:f,...e.demo?{docs:!1}:{}};o.start("Downloading template...");try{await At(a,f,b),o.stop("Template downloaded.")}catch(k){o.stop("Download failed."),A.cancel(C(k)),process.exit(1)}let z;o.start("Generating project files...");try{if({dockerComposeGenerated:z}=await jt(I),!e.demo){let k=await We(b);await l(qa(b,bt),JSON.stringify(k,null," ")+`
1263
- `),await to(b,b)}await oo(b,I.aiTools),await Qr(I,v),o.stop("Project files generated.")}catch(k){o.stop("Generation failed."),A.cancel(C(k)),process.exit(1)}await ao(b);let L=await so(b);L&&I.demo!==!0&&e.dbMigration!==!1&&await co(b),await lo(b),L&&await po(b);let K=Oe("docker"),Y=Yt(I).map(k=>k.key).filter(k=>!I.credentials?.[k]);uo(I,{pnpmInstalled:L,dockerComposeGenerated:z,dockerAvailable:K,skippedCredentials:Y}),Cn(),A.log.info(Wa.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as vo}from"fs";import{readFile as ko}from"fs/promises";import{join as dt,resolve as as}from"path";import*as N from"@clack/prompts";import Ze from"picocolors";import{mkdtemp as ts,rm as ns}from"fs/promises";import{tmpdir as rs}from"os";import{join as os}from"path";async function Sn(e,t,n,r){let o=await ts(os(rs(),"generatesaas-stage-"));try{await At(e,t,o),await jt({...n,projectDir:o}),await yn(o,r)}finally{await ns(o,{recursive:!0,force:!0})}}var fo=[{key:"frontend",label:"Frontend framework",hint:"Nuxt (Vue) or Next.js (React).",category:"Project",kind:"enum",default:"nuxt",choices:Ee,adoptable:!1,impact:"structural"},{key:"architecture",label:"Architecture",hint:"Fullstack (frontend hosts the API) or a standalone Hono backend.",category:"Infrastructure",kind:"enum",default:"fullstack",choices:Ne,adoptable:!1,impact:"structural"},{key:"deploymentTarget",label:"Deployment target",hint:"Node.js / Docker or Vercel serverless.",category:"Infrastructure",kind:"enum",default:"node",choices:le,adoptable:!1,impact:"config"},{key:"databaseProvider",label:"Database provider",hint:"Self-hosted PostgreSQL, Neon, or Supabase.",category:"Infrastructure",kind:"enum",default:"postgres",choices:pe,adoptable:!1,impact:"config"},{key:"cacheProvider",label:"Cache provider",hint:"Self-hosted Redis or Upstash.",category:"Infrastructure",kind:"enum",default:"redis",choices:de,adoptable:!1,impact:"config"},{key:"paymentProvider",label:"Payment provider",hint:"Stripe, Polar, or none.",category:"Features",kind:"enum",default:"none",choices:Le,adoptable:!1,impact:"structural"},{key:"defaultCurrency",label:"Default currency",hint:"Billing and pricing currency.",category:"Features",kind:"enum",default:"USD",choices:ce,adoptable:!1,impact:"config"},{key:"emailProvider",label:"Email provider",hint:"SMTP, Amazon SES, or Resend.",category:"Features",kind:"enum",default:"smtp",choices:$e,adoptable:!1,impact:"config"},{key:"multiTenancy",label:"Multi-tenancy (organizations)",hint:"Adds organizations - teams, members, and shared resources.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"billingScope",label:"Billing scope",hint:"Whether subscriptions belong to a user or an organization.",category:"Features",kind:"enum",default:"user",choices:Me,adoptable:!1,impact:"config",requires:e=>e.multiTenancy===!0,requiresLabel:"requires multi-tenancy"},{key:"blog",label:"Blog",hint:"Adds the marketing blog (content collection, list and post pages).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"docs",label:"Docs app",hint:"Adds the self-hosted Fumadocs documentation site (apps/docs).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktop",label:"Desktop app",hint:"Adds the cross-platform Electron desktop app (apps/desktop).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktopAutoRelease",label:"Desktop auto-release",hint:"Release the desktop app on every CI success (vs manual-only).",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"desktopAi",label:"Desktop AI orchestration",hint:"Adds the desktop AI agents layer (requires the desktop app).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"ai",label:"AI features",hint:"Adds the AI surface (chat, models, schedules, integrations) and unlocks the companion, MCP server, RAG, and BYOK options. Off keeps config.ai.enabled false so the AI nav stays hidden.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"rag",label:"Server-side RAG (knowledge)",hint:"Adds pgvector knowledge with embeddings + semantic search.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"companion",label:"Companion daemon",hint:"Adds the terminal companion (apps/companion) that drives the user's subscription CLIs over stateless HTTP. Works on any deployment.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"mcpServer",label:"Outward MCP server",hint:"Exposes the app's capability layer to external agents as an authenticated MCP OAuth server.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"aiByok",label:"AI billing mode (BYOK)",hint:"BYOK: end-users bring their own provider key, no credit metering. Off: operator-keyed, credit-metered platform mode.",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"credits",label:"Metered credits",hint:"Adds metered usage credits on top of subscription plans.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.paymentProvider!==void 0&&e.paymentProvider!=="none",requiresLabel:"requires a payment provider"},{key:"revenueSharing",label:"Revenue sharing",hint:"Opt-in MRR leaderboard with dofollow backlinks.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"socialProviders",label:"Social login providers",hint:"Which social sign-in buttons the auth screen shows.",category:"Features",kind:"multiselect",default:[],choices:Ve,adoptable:!1,impact:"config"},{key:"dockerServices",label:"Docker services",hint:"Local services scaffolded in docker-compose.",category:"Tooling",kind:"multiselect",default:[],choices:je,adoptable:!1,impact:"config"},{key:"aiTools",label:"AI coding tools",hint:"Which AI assistants receive the bundled skill files.",category:"Tooling",kind:"multiselect",default:[],choices:Ue,adoptable:!1,impact:"config"}];function is(e,t){return e[t]!==void 0}function go(e){return fo.filter(t=>t.adoptable&&!is(e,t.key)&&(t.requires?t.requires(e):!0)).map(t=>({key:t.key,label:t.label,hint:t.hint,kind:t.kind,default:t.default,...t.choices?{choices:t.choices}:{},impact:t.impact,...t.requiresLabel?{requiresLabel:t.requiresLabel}:{}}))}function ho(e){let t={};for(let n of fo)t[n.key]=Array.isArray(n.default)?[...n.default]:n.default;return{...t,...e}}function yo(e){let n=(e.startsWith("v")?e.slice(1):e).match(/^(\d+)\.(\d+)\.(\d+)$/);return n?[Number(n[1]),Number(n[2]),Number(n[3])]:null}function Mt(e,t){let n=yo(e),r=yo(t);if(!n||!r)return 0;for(let o=0;o<3;o++)if(n[o]!==r[o])return n[o]-r[o];return 0}function wo(e){e.command("update").description("Update AI skill files and stage template updates").argument("[mode]","pass 'auto' to mark the staged update for unattended apply by your AI assistant").option("--cwd <path>","project directory (default: current directory)").action(async(t,n)=>{let r=t==="auto"?"auto":void 0,o=as(n.cwd??process.cwd()),i=dt(o,he),a;try{a=JSON.parse(await ko(i,"utf-8"))}catch{N.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let s;try{s=await Fe()}catch(m){N.cancel(C(m)),process.exit(1)}let p=fe(s),f=N.spinner();try{f.start("Verifying access...");let m;try{m=await ke(p)}catch(T){throw T instanceof U&&T.status===401?new Error("Your saved API key was rejected. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):T}f.stop("Access verified."),Ie(s),f.start("Fetching latest skill files...");let d=await Bn(p,m.latest);await wn(o,d.skillMd,d.scripts,a.aiTools);let v=kn(a.aiTools);if(f.stop("Skills updated."),N.log.success(`Skill files installed to ${Ze.cyan(v.length.toString())} locations.`),a.version===m.latest){N.log.info(`Already on the latest version (${a.version}).`);return}let b=JSON.stringify(a);Ln(a);let I=go(a),z=ho(a),L=JSON.stringify(z)!==b;if(a=z,a.licenseToken)try{let T=await Gn(p,{currentToken:a.licenseToken,newVersion:m.latest});a.licenseToken=T.token,T.licenseKeyHash&&(a.licenseKeyHash=T.licenseKeyHash),await l(i,JSON.stringify(a,null," ")+`
1264
- `),L=!1,N.log.success("License refreshed.")}catch(T){let we=Et(T);we&&(N.cancel(we.message),process.exit(1)),N.log.warn("License refresh skipped.")}L&&await l(i,JSON.stringify(a,null," ")+`
1265
- `);let K=Zr(a,o),ge=dt(o,Vn);f.start(`Staging v${m.latest} (shaped for your config)...`),await Sn(p,m.latest,K,ge),f.stop("Template staged.");let{text:Y,title:k}=await ss(p,m,a.version);Y&&N.note(Y,k);let R=dt(o,bt),P=dt(o,St),ae=!vo(P),$=!vo(R);if(ae){if(f.start("Building baseline template (one-time migration)..."),await Sn(p,a.version,K,P),$){let T=await We(P);await l(R,JSON.stringify(T,null," ")+`
1266
- `)}if(f.stop("Baseline template stored."),!$){let T=await cs(R,P);T>0&&N.log.warn(`Rebuilt baseline differs from the original for ${T} file(s) (the CLI's shaping evolved since this project was scaffolded). Classification still follows the committed template-hashes.json; upstream diffs for those files may include unrelated noise.`)}}else if($){f.start("Computing baseline template hashes...");let T=await We(P);await l(R,JSON.stringify(T,null," ")+`
1267
- `),f.stop("Baseline hashes computed.")}if(await l(dt(o,Fn),JSON.stringify({currentVersion:a.version,targetVersion:m.latest,changelog:Y,stagedAt:new Date().toISOString(),...I.length>0?{newOptions:I}:{},...r?{mode:r}:{}},null," ")+`
1268
- `),N.log.info(`Update staged: ${Ze.cyan(a.version)} \u2192 ${Ze.cyan(m.latest)}`),a.aiTools&&a.aiTools.length>0){let T=a.aiTools[0],we=nt[T].label;N.log.info(`Open your project in ${Ze.cyan(we)} and ask: ${Ze.cyan("'update my GenerateSaaS project'")}`)}else N.log.info(`Ask your AI coding assistant to ${Ze.cyan("'update my GenerateSaaS project'")}.`)}catch(m){f.stop("Failed."),N.cancel(`Update failed: ${C(m)}`),process.exit(1)}})}async function ss(e,t,n){let r=t.latest,o=t.versions.filter(a=>Mt(a.version,n)>0&&Mt(a.version,r)<=0).sort((a,s)=>Mt(a.version,s.version));if(o.length<=1)return{text:await qt(e,r),title:`Changelog v${r}`};let i=[];for(let a of o){let s=null;try{s=await qt(e,a.version)}catch{s=null}let p=a.date?` (${a.date.slice(0,10)})`:"",f=a.breaking?" [BREAKING]":"";i.push(`# v${a.version}${p}${f}
1269
-
1270
- ${s??"_No changelog available for this release._"}`)}return{text:i.join(`
1271
-
1272
- `),title:`Changelog v${n} \u2192 v${r}`}}async function cs(e,t){let n=JSON.parse(await ko(e,"utf-8")),r=await We(t),o=0;for(let[i,a]of Object.entries(n))Be(i)||r[i]!==a&&o++;for(let i of Object.keys(r))i in n||o++;return o}import*as H from"@clack/prompts";import ee from"picocolors";import{readFile as ls}from"fs/promises";import{join as ps,resolve as ds}from"path";function bo(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let n=ds(t.cwd??process.cwd()),r=ps(n,he),o;try{o=JSON.parse(await ls(r,"utf-8"))}catch{H.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let i=[`Version: ${ee.cyan(o.version)}`,`Frontend: ${ee.cyan(o.frontend)}`,o.deploymentTarget?`Deploy target: ${ee.cyan(o.deploymentTarget)}`:null,o.databaseProvider?`Database: ${ee.cyan(o.databaseProvider)}`:null,o.cacheProvider?`Cache: ${ee.cyan(o.cacheProvider)}`:null,o.aiTools&&o.aiTools.length>0?`AI tools: ${ee.cyan(o.aiTools.join(", "))}`:null].filter(Boolean).join(`
1273
- `);H.note(i,ee.bold("Project Status"));let a=H.spinner();a.start("Checking for updates...");try{let s=await Fe(),p=fe(s),m=(await ke(p)).latest;o.version===m?(a.stop("Up to date."),H.log.success(`Already on the latest version (${ee.green(m)})`)):(a.stop("Update available."),H.log.warning(`Update available: ${ee.yellow(o.version)} \u2192 ${ee.green(m)}`),H.log.info(`Open this project in your AI coding agent and ask it to ${ee.cyan("update my GenerateSaaS project")} - it fetches and applies the update for you.`))}catch(s){a.stop("Check failed."),s instanceof U&&s.status===401?H.log.warning("Invalid API key. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):H.log.warning(`Could not check for updates: ${C(s)}`)}})}import{readFile as us}from"fs/promises";import*as x from"@clack/prompts";import O from"picocolors";function ms(){return process.env.GENERATESAAS_API_KEY??at()}function fs(e){return{verdict:e.verdict,plan:e.license?.plan??e.domainInstalls.find(t=>t.ownerPlan)?.ownerPlan??null,mismatchDomain:e.install?.domain??null,ejectedAt:e.install?.ejectedAt??e.domainInstalls.find(t=>t.ejectedAt)?.ejectedAt??null}}function gs(e){return{verdict:e.verdict??"unknown",ejectedAt:e.ejectedAt??null}}function hs(e){switch(e.verdict){case"licensed":return x.log.success(`${O.green("LICENSED")} - resolves to an account with an active${e.plan?` ${e.plan}`:""} license.`),!0;case"ejected":return x.log.success(`${O.green("EJECTED")} - a licensed buyer opted this install out of telemetry${e.ejectedAt?` on ${e.ejectedAt.slice(0,10)}`:""}. The site is legitimate.`),!0;case"revoked":return x.log.error(`${O.red("REVOKED")} - the owning account no longer holds a plan (refund or chargeback). This deployment is no longer licensed.`),!1;case"token_domain_mismatch":return x.log.error(`${O.red("LEAKED TOKEN")} - this license belongs to a different deployment${e.mismatchDomain?` (${O.cyan(e.mismatchDomain)})`:""}, not this site. The token was copied from a licensed project.`),!1;case"no_license_history":return x.log.error(`${O.red("NO LICENSE HISTORY")} - no license has ever been associated with this site. If it runs GenerateSaaS, treat it as unlicensed.`),!1;default:return x.log.warn(`${O.yellow("UNKNOWN")} - could not cross-reference the records right now. Try again shortly.`),!1}}async function So(e,t){let n=process.env.GENERATESAAS_API_URL??it,r=ms();e.start("Cross-referencing license records...");try{let o=r?fs(await Hn(n,r,{lkh:t.lkh,nid:t.nid,domain:t.domain})):gs(await Wt(n,{token:t.token,domain:t.domain}));return e.stop(`${O.green("Checked")} - records cross-referenced`),hs(o)}catch(o){return e.stop(`${O.yellow("Skipped")} - ${C(o)}`),null}}function ys(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let n=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(n)}function En(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function Eo(e){x.note([`License ID: ${O.cyan(String(e.lid??"unknown"))}`,`Version: ${O.cyan(String(e.ver??"unknown"))}`,`Init version: ${String(e.iver??"unknown")}`,`Frontend: ${String(e.fe??"unknown")}`,`Created: ${En(e.pat)}`,`Last updated: ${En(e.uat)}`,`Expires: ${En(e.exp)}`,`Install ID: ${String(e.nid??"unknown")}`].join(`
1274
- `),O.yellow("License Details"))}function vs(e){let n=(/^https?:\/\//i.test(e)?e:`https://${e}`).replace(/\/+$/,"");if(n.endsWith("/api"))return[`${n}/license`];try{if(new URL(n).pathname!=="/")return[`${n}/license`]}catch{return[`${n}/license`]}return[`${n}/api/license`,`${n}/license`]}async function Ao(e){let t=x.spinner(),n=null,r="no candidates";for(let a of vs(e)){t.start(`Checking ${a}...`);try{let s=await fetch(a);if(!s.ok){r=`${a} returned ${s.status}`,t.stop(`${O.yellow("Not here")} - ${r}`);continue}let p=(await s.text()).trim();if(!p||p.split(".").length!==3){r=`${a} did not return a JWT`,t.stop(`${O.yellow("Not here")} - ${r}`);continue}n=p,t.stop(`${O.green("Found")} - license endpoint responded`);break}catch(s){r=`${a}: ${C(s)}`,t.stop(`${O.yellow("Unreachable")} - ${r}`)}}if(n===null){x.log.warn(`No license endpoint found (last: ${r}). The site may be ejected, not a GenerateSaaS app, or serving its API elsewhere.`);let a=Io(e);return a?await So(t,{domain:a})??!1:!1}let o;try{o=ys(n)}catch{return x.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let a=process.env.GENERATESAAS_API_URL??it,s=await Wt(a,{token:n});if(s.valid)t.stop(`${O.green("Valid")} - signature verified`);else return t.stop(`${O.red("Invalid")} - ${s.reason}`),!1}catch{return t.stop(`${O.yellow("Skipped")} - could not reach verification service`),x.log.warn("Signature not verified. Displaying unverified claims:"),Eo(o),!1}return Eo(o),await So(t,{token:n,lkh:typeof o.lkh=="string"?o.lkh:void 0,nid:typeof o.nid=="string"?o.nid:void 0,domain:Io(e)})??!0}function Io(e){try{return new URL(/^https?:\/\//i.test(e)?e:`https://${e}`).hostname}catch{return}}function Po(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com or https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,n)=>{if(!t&&!n.file&&(x.cancel("Provide a URL or --file <path>."),process.exit(1)),n.file){let o=(await us(n.file,"utf-8")).split(`
1275
- `).map(a=>a.trim()).filter(a=>a&&!a.startsWith("#"));o.length===0&&(x.cancel("No URLs found in file."),process.exit(1));let i=0;for(let a of o)await Ao(a)&&i++,x.log.info("");x.log.success(`${i}/${o.length} sites verified.`)}else await Ao(t)||process.exit(1)})}import{existsSync as ks,rmSync as ws}from"fs";import*as te from"@clack/prompts";function To(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){ks(me)?(ws(me),te.log.success("API key removed.")):te.log.info("No API key configured.");return}let n=at();n?te.log.info(`Current API key: ****${n.slice(-4)}`):te.log.info("No API key configured.");let r=await st(),o=fe(r),i=te.spinner();i.start("Verifying API key...");try{await ke(o),i.stop("API key verified."),Ie(r),te.log.success("API key saved.")}catch(a){i.stop("Verification failed."),a instanceof U&&a.status===401?te.cancel("Invalid API key."):te.cancel(C(a)),process.exit(1)}})}import{existsSync as Vt,rmSync as bs,readFileSync as In,writeFileSync as Ro}from"fs";import{join as xe}from"path";import*as V from"@clack/prompts";var Ss=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/cron-spread.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],Es=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat";
1402
+ `;await l(Ut(t,"providers/index.ts"),r),await l(Ut(t,"index.ts"),await Rs(t,n))}async function Rs(e,t){let n=Ut(e,"index.ts");if(!Ps(n))throw new Error(`generatePaymentBarrel: expected ${n} to exist - did packages/payments move?`);let r=await Is(n,"utf-8"),i=Ts.filter(s=>s!==t);return r.split(`
1403
+ `).filter(s=>!i.some(a=>s.includes(`./providers/${a}/`))).join(`
1404
+ `)}import{readdir as _s,readFile as Os}from"fs/promises";import{join as Yr}from"path";async function qr(e){if(e.demo)return;let t=e.appName.trim()||e.projectName,n=JSON.stringify(t).slice(1,-1),r=Yr(e.projectDir,"packages/i18n/translations"),i;try{i=await _s(r)}catch{return}for(let o of i){let s=Yr(r,o,"web.json"),a;try{a=await Os(s,"utf-8")}catch{continue}let d=a.replaceAll("GenerateSaaS",n);d!==a&&await l(s,d)}}import{readFile as xs}from"fs/promises";import{join as Jr}from"path";var Cs=[".nuxt/",".nuxt",".nitro/",".nitro",".output/",".output","_locales/"],Ds=[".next/",".next",".svelte-kit/",".svelte-kit",".wrangler/",".wrangler",".dev.vars"];async function Xr(e){let n=e.frontend==="nuxt"?Ds:Cs;await Wr(Jr(e.projectDir,".gitignore"),n),await Wr(Jr(e.projectDir,".dockerignore"),n)}async function Wr(e,t){let n;try{n=await xs(e,"utf-8")}catch{return}let r=new Set(t),i=n.split(`
1405
+ `).filter(o=>!r.has(o.trim()));i.length!==n.split(`
1406
+ `).length&&await l(e,i.join(`
1407
+ `))}async function Mt(e){let t=e.projectDir;e.demo||(await Zn(t),await Qn(t),await er(t),await tr(t),e.desktop&&e.desktopAi&&await nr(t)),await rr(t,e.aiTools),await ir(t,e.frontend),await sr(e),await ar(e),await cr(e),e.demo||await lr(e),await ur(e);let n=await mr(e);return await fr(e),await gr(e),await hr(e),await yr(e),await vr(e),await br(e),await Er(e),await Ar(e),await Tr(e),await _r(e),await Cr(e),await Fr(e),await Dr(e),await Nr(e),await Lr(e),await $r(e),await jr(e),await Ur(e),await Mr(e),await Br(e),await dn(e),await mn(e),await gn(e),await Hr(e),await zr(e),await qr(e),await Xr(e),{dockerComposeGenerated:n}}import{basename as Qr,join as ei,relative as Ls}from"path";import{createHash as Zr}from"crypto";import{readFile as Ns}from"fs/promises";async function Vt(e){let t=await Ns(e);return Zr("sha256").update(t).digest("hex")}function vn(e){return Zr("sha256").update(e).digest("hex")}var $s=new Set(["data",W]);function js(e){let t=e.split("/");for(let n of t)if(Qt.has(n)||en.has(n)||$s.has(n)||n.startsWith(".env")&&!n.includes("example"))return!0;return!1}function ti(e,t){return{projectName:e.projectName??Qr(t),appName:e.appName??e.projectName??Qr(t),projectDir:t,frontend:e.frontend==="nextjs"?"nextjs":"nuxt",architecture:e.architecture??"fullstack",paymentProvider:e.paymentProvider??"none",emailProvider:e.emailProvider??"smtp",multiTenancy:e.multiTenancy??!1,billingScope:e.billingScope??"user",blog:e.blog??!1,docs:e.docs??!1,desktop:e.desktop??!1,desktopAutoRelease:e.desktopAutoRelease??!0,desktopAi:e.desktopAi??!1,ai:e.ai??!1,rag:e.rag??!1,companion:e.companion??!1,mcpServer:e.mcpServer??!1,aiByok:e.aiByok??!0,revenueSharing:e.revenueSharing??!1,credits:e.credits??!1,dockerServices:e.dockerServices??[],aiTools:e.aiTools??[],socialProviders:e.socialProviders??[],defaultCurrency:e.defaultCurrency??"USD",deploymentTarget:e.deploymentTarget??"node",databaseProvider:e.databaseProvider??"postgres",cacheProvider:e.cacheProvider??"redis",version:e.version,baseUrl:e.baseUrl,credentials:{},demo:!1}}function Us(e,t){return{version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",appName:e.appName,projectName:e.projectName,frontend:e.frontend,architecture:e.architecture,paymentProvider:e.paymentProvider,emailProvider:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,desktopAutoRelease:e.desktopAutoRelease,desktopAi:e.desktopAi,ai:e.ai,rag:e.rag,companion:e.companion,mcpServer:e.mcpServer,aiByok:e.aiByok,credits:e.credits,revenueSharing:e.revenueSharing,defaultCurrency:e.defaultCurrency,dockerServices:e.dockerServices,socialProviders:e.socialProviders,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,aiTools:e.aiTools,...e.baseUrl?{baseUrl:e.baseUrl}:{},...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}}}async function ni(e,t){let r=(await _e(e.projectDir,e.projectDir,js)).sort(),i=await Promise.all(r.map(async a=>[Re(Ls(e.projectDir,a)),await Vt(a)])),o=Object.fromEntries(i),s=Us(e,t);await l(ei(e.projectDir,he),JSON.stringify(s,null," ")+`
1408
+ `),await l(ei(e.projectDir,Bn),JSON.stringify(o,null," ")+`
1409
+ `)}import{relative as Ms}from"path";async function Xe(e){let n=(await _e(e,e,Ge)).sort(),r=await Promise.all(n.map(async i=>[Re(Ms(e,i)),await Vt(i)]));return Object.fromEntries(r)}import{copyFile as Vs,mkdir as Bs,rm as Fs}from"fs/promises";import{dirname as Ks,join as ri,relative as Gs}from"path";import{existsSync as Hs}from"fs";async function bn(e,t){Hs(t)&&await Fs(t,{recursive:!0,force:!0});let n=await _e(e,e,Ge);for(let r of n){let i=Re(Gs(e,r)),o=ri(t,i);await Bs(Ks(o),{recursive:!0}),await Vs(r,o)}}async function ii(e,t){await bn(e,ri(t,St))}import{existsSync as zs}from"fs";import{readFile as oi,readdir as Ys}from"fs/promises";import{join as se,dirname as qs,resolve as Js,sep as Ws}from"path";import{fileURLToPath as Xs}from"url";var pt={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Md=Object.values(pt),kn="generatesaas-update",si=qs(Xs(import.meta.url));function Zs(){let e=se(si,"skill","content");return zs(e)?e:se(si,"content")}function wn(e){return!e||e.length===0?[]:e.map(t=>pt[t])}async function Sn(e,t,n,r){let i=wn(r);for(let o of i){let s=se(e,o,kn),a=se(s,"scripts"),d=se(s,"references");await Rt(a),await Rt(d),await l(se(s,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",o)),await l(se(d,".gitkeep"),"");for(let[m,p]of Object.entries(n)){let f=Js(a,m);f.startsWith(a+Ws)&&await l(f,p)}}}async function ai(e,t){let n=Zs(),r=await oi(se(n,"SKILL.md"),"utf-8"),i=se(n,"scripts"),o=await Ys(i),s={};for(let a of o)a!==".gitkeep"&&(s[a]=await oi(se(i,a),"utf-8"));await Sn(e,r,s,t)}import{execFile as Qs,execFileSync as ea}from"child_process";import{access as ci,readFile as ta}from"fs/promises";import{join as En}from"path";import*as j from"@clack/prompts";function Ce(e){try{let t=process.platform==="win32"?"where":"which";return ea(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function xe(e,t,n,r=3e5){return new Promise((i,o)=>{Qs(e,t,{cwd:n,timeout:r,maxBuffer:50*1024*1024},(s,a,d)=>{if(s){let m=String(a||"").trim(),f=[String(d||"").trim(),m].filter(Boolean).join(`
1410
+ `);o(new Error(f?`${s.message}
1411
+ ${f}`:s.message))}else i()})})}async function li(e){if(!Ce("pnpm"))return j.log.warn("pnpm not found. Skipping lockfile regeneration."),!1;try{return await xe("pnpm",["install","--lockfile-only","--no-frozen-lockfile","--config.minimumReleaseAge=0"],e),!0}catch(t){let n=t instanceof Error?t.message:String(t);return j.log.warn(`Lockfile regeneration failed: ${n}`),j.log.warn("Deploys using --frozen-lockfile may fail."),!1}}async function pi(e){if(!Ce("pnpm"))return j.log.warn("pnpm not found. Skipping dependency installation."),j.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=j.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await xe("pnpm",["install","--config.minimumReleaseAge=0"],e),t.stop("Dependencies installed."),!0}catch(n){t.stop("Dependency installation failed.");let r=n instanceof Error?n.message:String(n);return j.log.warn(`pnpm install failed: ${r}`),j.log.warn("You can run it manually later."),!1}}async function di(e){if(!Ce("pnpm"))return!1;let t=j.spinner();t.start("Generating baseline database migration...");try{return await xe("pnpm",["-F","@repo/database","generate"],e),t.stop("Baseline migration generated."),!0}catch(n){t.stop("Baseline migration generation failed.");let r=n instanceof Error?n.message:String(n);return j.log.warn(`Could not generate baseline migration: ${r}`),j.log.warn("Run 'pnpm -F @repo/database generate' before your first deploy."),!1}}async function ui(e){try{return await ci(En(e,".git")),j.log.info("Git repository already exists, skipping init."),!0}catch{}if(!Ce("git"))return j.log.warn("git not found. Skipping repository initialization."),!1;let t=j.spinner();t.start("Initializing git repository...");try{return await xe("git",["init"],e),await xe("git",["add","-A"],e),await xe("git",["commit","--no-verify","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),j.log.warn("You can run git init manually later."),!1}}async function mi(e){if(!Ce("pnpm"))return!1;try{await ci(En(e,".git"))}catch{return!1}try{let t=JSON.parse(await ta(En(e,"package.json"),"utf-8")),n=!!t.devDependencies?.["simple-git-hooks"],r=!!t["simple-git-hooks"];if(!n||!r)return!1}catch{return!1}try{return await xe("pnpm",["exec","simple-git-hooks"],e),!0}catch{return j.log.warn("Could not install git hooks. Run 'pnpm exec simple-git-hooks' manually."),!1}}import*as Ze from"@clack/prompts";import Q from"picocolors";function fi(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&Ze.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let n=[];if(n.push(`cd ${e.projectDir}`),t.pnpmInstalled||n.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(s=>Le[s].label).join(", ");n.push(`pnpm infra ${Q.dim(`# ${o}`)}`)}if(n.push(`pnpm dev ${Q.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(n.push(""),n.push(Q.dim("Fill in remaining TODO values in .env"))),Ze.note(n.join(`
1412
+ `),Q.yellow("Start Development")),t.dockerComposeGenerated){let o=[];o.push(`App ${Q.cyan("http://localhost:3000")}`),e.architecture==="separate"&&o.push(`API ${Q.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&o.push(`Mailpit ${Q.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&o.push(`Inngest ${Q.cyan("http://localhost:8288")}`),Ze.note(o.join(`
1413
+ `),Q.yellow("Dev Tools"))}let r=[],i=na(e);i.length>0&&r.push(`Set in production: ${Q.dim(i.join(", "))}`),r.push("pnpm db:setup # Apply the database schema"),r.push(ra(e)),Ze.note(r.join(`
1414
+ `),Q.yellow("Deployment"))}function na(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function ra(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy # Deploy to Vercel"}}import la from"picocolors";var pa="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";async function da(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(`generatesaas-demo:${e}`)),n=[...new Uint8Array(t).subarray(0,16)].map(r=>r.toString(16).padStart(2,"0")).join("");return`${n.slice(0,8)}-${n.slice(8,12)}-${n.slice(12,16)}-${n.slice(16,20)}-${n.slice(20,32)}`}function ua(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function gi(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new ee("--frontend <type>","frontend framework").choices([...Ie])).addOption(new ee("--architecture <type>","fullstack or separate").choices([...$e])).addOption(new ee("--payment <provider>","payment provider").choices([...je])).addOption(new ee("--email <provider>","email provider").choices([...Ue])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new ee("--billing-scope <scope>","billing scope (requires --org)").choices([...Be])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--desktop","include the desktop app (apps/tauri, built with Tauri)").option("--no-desktop","exclude the desktop app").option("--desktop-auto","auto-trigger the desktop release workflow on CI success (default: manual-only)").option("--no-desktop-auto","manual-only desktop releases (workflow_dispatch)").option("--desktop-ai","include the desktop AI orchestration layer (requires --desktop)").option("--no-desktop-ai","exclude the desktop AI orchestration layer").option("--ai","include the AI features (chat, models, schedules, integrations); unlocks the companion + MCP server").option("--no-ai","exclude the AI features").option("--rag","include the server-side knowledge base (keyword search over your knowledge/ docs)").option("--no-rag","exclude the server-side knowledge base").option("--companion","include the companion daemon (apps/companion) + its HTTP transport").option("--no-companion","exclude the companion daemon").option("--mcp-server","include the outward MCP server (the /mcp route + Better Auth mcp() provider)").option("--no-mcp-server","exclude the outward MCP server").option("--ai-byok","AI BYOK mode: end-users bring their own provider key (default)").option("--no-ai-byok","operator-keyed, credit-metered AI platform mode").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new ee("--currency <code>","default currency for billing").choices([...le])).addOption(new ee("--deploy <target>","deployment target").choices([...pe])).addOption(new ee("--database <provider>","database provider").choices([...de])).addOption(new ee("--cache <provider>","cache provider").choices([...ue])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new ee("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new ee("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,n)=>{await ma(t?{...n,apiKey:t}:n)})}async function ma(e){let t=performance.now();Dn("1.21.0");let n,r;try{n=Un(e),r=ua(e.templateVersion)}catch(v){E.cancel(L(v)),process.exit(1)}let i=E.spinner(),o;try{o=await Ke({apiKey:e.apiKey,prompt:!e.yes})}catch(v){E.cancel(L(v)),process.exit(1)}e.demo&&vn(o)!==pa&&(E.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let s=ge(o),a=async()=>{let v=await be(s),P=v.latest,_=r??P;if(r&&!v.versions.some(z=>z.version===_))throw new Error(`Template version "${r}" is not available.`);return{latestVersion:P,selectedVersion:_,desktopAllowed:v.entitlements?.desktopAllowed??!0}};i.start("Verifying access...");let d,m,p=!0;try{({latestVersion:d,selectedVersion:m,desktopAllowed:p}=await a()),i.stop("Access verified."),Te(o)}catch(v){if(i.stop("Access verification failed."),v instanceof M&&v.status===401){e.yes&&(E.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),E.log.warning("Invalid API key."),o=await ct(),s=ge(o),i.start("Verifying access...");try{({latestVersion:d,selectedVersion:m,desktopAllowed:p}=await a()),i.stop("Access verified."),Te(o)}catch(P){i.stop("Access verification failed."),E.cancel(P instanceof M&&P.status===401?"Invalid API key.":L(P)),process.exit(1)}}else E.cancel(L(v)),process.exit(1)}E.log.success(`Latest version: ${d}`),m!==d&&E.log.success(`Using template version: ${m}`),n.desktop===!0&&!p&&(E.cancel("The desktop app is available on the Pro plan and up. Upgrade your plan at generatesaas.com."),process.exit(1));let f;e.yes?f=Mn(p?n:{...n,desktop:!1}):f=await Vn(n,{desktopAllowed:p});let w;i.start("Activating license...");try{let v=e.demo&&f.baseUrl?await da(f.baseUrl):crypto.randomUUID(),P=()=>({frontend:f.frontend,version:m,installId:v,projectName:f.projectName,options:Hn(f)}),_;try{_=await Xt(s,P())}catch(z){let I=Et(z);if(!I?.lastAllowedVersion)throw z;i.stop("License activation failed."),e.yes&&(E.cancel(`${I.message} Re-run with --template-version ${I.lastAllowedVersion}.`),process.exit(1));let T=await E.confirm({message:`Your update window has ended. Continue with v${I.lastAllowedVersion} (the last version your license covers)?`});(E.isCancel(T)||!T)&&(E.cancel("Setup cancelled."),process.exit(0)),m=I.lastAllowedVersion,i.start(`Activating license for v${m}...`),_=await Xt(s,P())}w={token:_.token,keyHash:vn(o),installId:_.installId??v},i.stop("License activated.")}catch(v){i.stop("License activation failed."),E.cancel(L(v)),process.exit(1)}let b=ca(f.projectDir);if(ia(b)&&oa(b).length>0)if(e.yes)E.log.info(`Directory ${b} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let P=await E.select({message:`Directory ${b} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(E.isCancel(P)||P==="cancel")&&(E.cancel("Setup cancelled."),process.exit(0)),P==="overwrite"&&sa(b,{recursive:!0,force:!0})}let A={...f,projectDir:b,version:m,...e.demo?{docs:!1}:{}};i.start("Downloading template...");try{await At(s,m,b),i.stop("Template downloaded.")}catch(v){i.stop("Download failed."),E.cancel(L(v)),process.exit(1)}let J;i.start("Generating project files...");try{if({dockerComposeGenerated:J}=await Mt(A),!e.demo){let v=await Xe(b);await l(aa(b,wt),JSON.stringify(v,null," ")+`
1415
+ `),await ii(b,b)}await ai(b,A.aiTools),await ni(A,w),i.stop("Project files generated.")}catch(v){i.stop("Generation failed."),E.cancel(L(v)),process.exit(1)}await li(b);let V=await pi(b);V&&A.demo!==!0&&e.dbMigration!==!1&&await di(b),await ui(b),V&&await mi(b);let R=Ce("docker"),B=Jt(A).map(v=>v.key).filter(v=>!A.credentials?.[v]);fi(A,{pnpmInstalled:V,dockerComposeGenerated:J,dockerAvailable:R,skippedCredentials:B}),Nn(),E.log.info(la.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as ki}from"fs";import{readFile as wi}from"fs/promises";import{join as dt,resolve as ba}from"path";import*as U from"@clack/prompts";import Qe from"picocolors";import{mkdtemp as fa,rm as ga}from"fs/promises";import{tmpdir as ha}from"os";import{join as ya}from"path";async function An(e,t,n,r){let i=await fa(ya(ha(),"generatesaas-stage-"));try{await At(e,t,i),await Mt({...n,projectDir:i}),await bn(i,r)}finally{await ga(i,{recursive:!0,force:!0})}}var hi=[{key:"frontend",label:"Frontend framework",hint:"Nuxt (Vue) or Next.js (React).",category:"Project",kind:"enum",default:"nuxt",choices:Ie,adoptable:!1,impact:"structural"},{key:"architecture",label:"Architecture",hint:"Fullstack (frontend hosts the API) or a standalone Hono backend.",category:"Infrastructure",kind:"enum",default:"fullstack",choices:$e,adoptable:!1,impact:"structural"},{key:"deploymentTarget",label:"Deployment target",hint:"Node.js / Docker or Vercel serverless.",category:"Infrastructure",kind:"enum",default:"node",choices:pe,adoptable:!1,impact:"config"},{key:"databaseProvider",label:"Database provider",hint:"Self-hosted PostgreSQL, Neon, or Supabase.",category:"Infrastructure",kind:"enum",default:"postgres",choices:de,adoptable:!1,impact:"config"},{key:"cacheProvider",label:"Cache provider",hint:"Self-hosted Redis or Upstash.",category:"Infrastructure",kind:"enum",default:"redis",choices:ue,adoptable:!1,impact:"config"},{key:"paymentProvider",label:"Payment provider",hint:"Stripe, Polar, or none.",category:"Features",kind:"enum",default:"none",choices:je,adoptable:!1,impact:"structural"},{key:"defaultCurrency",label:"Default currency",hint:"Billing and pricing currency.",category:"Features",kind:"enum",default:"USD",choices:le,adoptable:!1,impact:"config"},{key:"emailProvider",label:"Email provider",hint:"SMTP, Amazon SES, or Resend.",category:"Features",kind:"enum",default:"smtp",choices:Ue,adoptable:!1,impact:"config"},{key:"multiTenancy",label:"Multi-tenancy (organizations)",hint:"Adds organizations - teams, members, and shared resources.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"billingScope",label:"Billing scope",hint:"Whether subscriptions belong to a user or an organization.",category:"Features",kind:"enum",default:"user",choices:Be,adoptable:!1,impact:"config",requires:e=>e.multiTenancy===!0,requiresLabel:"requires multi-tenancy"},{key:"blog",label:"Blog",hint:"Adds the marketing blog (content collection, list and post pages).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"docs",label:"Docs app",hint:"Adds the self-hosted Fumadocs documentation site (apps/docs).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktop",label:"Desktop app",hint:"Adds the cross-platform desktop app (apps/tauri, built with Tauri).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktopAutoRelease",label:"Desktop auto-release",hint:"Release the desktop app on every CI success (vs manual-only).",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"desktopAi",label:"Desktop AI orchestration",hint:"Adds the desktop AI agents layer (requires the desktop app).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"ai",label:"AI features",hint:"Adds the AI surface (chat, models, schedules, integrations) and unlocks the companion, MCP server, knowledge base, and BYOK options. Off keeps config.ai.enabled false so the AI nav stays hidden.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"rag",label:"Server-side knowledge base",hint:"Adds a keyword knowledge base over your `knowledge/` docs.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"companion",label:"Companion daemon",hint:"Adds the terminal companion (apps/companion) that drives the user's subscription CLIs over stateless HTTP. Works on any deployment.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"mcpServer",label:"Outward MCP server",hint:"Exposes the app's capability layer to external agents as an authenticated MCP OAuth server.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"aiByok",label:"AI billing mode (BYOK)",hint:"BYOK: end-users bring their own provider key, no credit metering. Off: operator-keyed, credit-metered platform mode.",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"credits",label:"Metered credits",hint:"Adds metered usage credits on top of subscription plans.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.paymentProvider!==void 0&&e.paymentProvider!=="none",requiresLabel:"requires a payment provider"},{key:"revenueSharing",label:"Revenue sharing",hint:"Opt-in MRR leaderboard with dofollow backlinks.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"socialProviders",label:"Social login providers",hint:"Which social sign-in buttons the auth screen shows.",category:"Features",kind:"multiselect",default:[],choices:Fe,adoptable:!1,impact:"config"},{key:"dockerServices",label:"Docker services",hint:"Local services scaffolded in docker-compose.",category:"Tooling",kind:"multiselect",default:[],choices:Me,adoptable:!1,impact:"config"},{key:"aiTools",label:"AI coding tools",hint:"Which AI assistants receive the bundled skill files.",category:"Tooling",kind:"multiselect",default:[],choices:Ve,adoptable:!1,impact:"config"}];function va(e,t){return e[t]!==void 0}function yi(e){return hi.filter(t=>t.adoptable&&!va(e,t.key)&&(t.requires?t.requires(e):!0)).map(t=>({key:t.key,label:t.label,hint:t.hint,kind:t.kind,default:t.default,...t.choices?{choices:t.choices}:{},impact:t.impact,...t.requiresLabel?{requiresLabel:t.requiresLabel}:{}}))}function vi(e){let t={};for(let n of hi)t[n.key]=Array.isArray(n.default)?[...n.default]:n.default;return{...t,...e}}function bi(e){let n=(e.startsWith("v")?e.slice(1):e).match(/^(\d+)\.(\d+)\.(\d+)$/);return n?[Number(n[1]),Number(n[2]),Number(n[3])]:null}function Bt(e,t){let n=bi(e),r=bi(t);if(!n||!r)return 0;for(let i=0;i<3;i++)if(n[i]!==r[i])return n[i]-r[i];return 0}function Si(e){e.command("update").description("Update AI skill files and stage template updates").argument("[mode]","pass 'auto' to mark the staged update for unattended apply by your AI assistant").option("--cwd <path>","project directory (default: current directory)").action(async(t,n)=>{let r=t==="auto"?"auto":void 0,i=ba(n.cwd??process.cwd()),o=dt(i,he),s;try{s=JSON.parse(await wi(o,"utf-8"))}catch{U.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let a;try{a=await Ke()}catch(p){U.cancel(L(p)),process.exit(1)}let d=ge(a),m=U.spinner();try{m.start("Verifying access...");let p;try{p=await be(d)}catch(T){throw T instanceof M&&T.status===401?new Error("Your saved API key was rejected. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):T}m.stop("Access verified."),Te(a),m.start("Fetching latest skill files...");let f=await Gn(d,p.latest);await Sn(i,f.skillMd,f.scripts,s.aiTools);let w=wn(s.aiTools);if(m.stop("Skills updated."),U.log.success(`Skill files installed to ${Qe.cyan(w.length.toString())} locations.`),s.version===p.latest){U.log.info(`Already on the latest version (${s.version}).`);return}let b=JSON.stringify(s);jn(s);let A=yi(s),J=vi(s),V=JSON.stringify(J)!==b;if(s=J,s.licenseToken)try{let T=await zn(d,{currentToken:s.licenseToken,newVersion:p.latest});s.licenseToken=T.token,T.licenseKeyHash&&(s.licenseKeyHash=T.licenseKeyHash),await l(o,JSON.stringify(s,null," ")+`
1416
+ `),V=!1,U.log.success("License refreshed.")}catch(T){let Se=Et(T);Se&&(U.cancel(Se.message),process.exit(1)),U.log.warn("License refresh skipped.")}V&&await l(o,JSON.stringify(s,null," ")+`
1417
+ `);let R=ti(s,i),ae=dt(i,Fn);m.start(`Staging v${p.latest} (shaped for your config)...`),await An(d,p.latest,R,ae),m.stop("Template staged.");let{text:B,title:v}=await ka(d,p,s.version);B&&U.note(B,v);let P=dt(i,wt),_=dt(i,St),z=!ki(_),I=!ki(P);if(z){if(m.start("Building baseline template (one-time migration)..."),await An(d,s.version,R,_),I){let T=await Xe(_);await l(P,JSON.stringify(T,null," ")+`
1418
+ `)}if(m.stop("Baseline template stored."),!I){let T=await wa(P,_);T>0&&U.log.warn(`Rebuilt baseline differs from the original for ${T} file(s) (the CLI's shaping evolved since this project was scaffolded). Classification still follows the committed template-hashes.json; upstream diffs for those files may include unrelated noise.`)}}else if(I){m.start("Computing baseline template hashes...");let T=await Xe(_);await l(P,JSON.stringify(T,null," ")+`
1419
+ `),m.stop("Baseline hashes computed.")}if(await l(dt(i,Kn),JSON.stringify({currentVersion:s.version,targetVersion:p.latest,changelog:B,stagedAt:new Date().toISOString(),...A.length>0?{newOptions:A}:{},...r?{mode:r}:{}},null," ")+`
1420
+ `),U.log.info(`Update staged: ${Qe.cyan(s.version)} \u2192 ${Qe.cyan(p.latest)}`),s.aiTools&&s.aiTools.length>0){let T=s.aiTools[0],Se=rt[T].label;U.log.info(`Open your project in ${Qe.cyan(Se)} and ask: ${Qe.cyan("'update my GenerateSaaS project'")}`)}else U.log.info(`Ask your AI coding assistant to ${Qe.cyan("'update my GenerateSaaS project'")}.`)}catch(p){m.stop("Failed."),U.cancel(`Update failed: ${L(p)}`),process.exit(1)}})}async function ka(e,t,n){let r=t.latest,i=t.versions.filter(s=>Bt(s.version,n)>0&&Bt(s.version,r)<=0).sort((s,a)=>Bt(s.version,a.version));if(i.length<=1)return{text:await Wt(e,r),title:`Changelog v${r}`};let o=[];for(let s of i){let a=null;try{a=await Wt(e,s.version)}catch{a=null}let d=s.date?` (${s.date.slice(0,10)})`:"",m=s.breaking?" [BREAKING]":"";o.push(`# v${s.version}${d}${m}
1421
+
1422
+ ${a??"_No changelog available for this release._"}`)}return{text:o.join(`
1423
+
1424
+ `),title:`Changelog v${n} \u2192 v${r}`}}async function wa(e,t){let n=JSON.parse(await wi(e,"utf-8")),r=await Xe(t),i=0;for(let[o,s]of Object.entries(n))Ge(o)||r[o]!==s&&i++;for(let o of Object.keys(r))o in n||i++;return i}import*as q from"@clack/prompts";import te from"picocolors";import{readFile as Sa}from"fs/promises";import{join as Ea,resolve as Aa}from"path";function Ei(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let n=Aa(t.cwd??process.cwd()),r=Ea(n,he),i;try{i=JSON.parse(await Sa(r,"utf-8"))}catch{q.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o=[`Version: ${te.cyan(i.version)}`,`Frontend: ${te.cyan(i.frontend)}`,i.deploymentTarget?`Deploy target: ${te.cyan(i.deploymentTarget)}`:null,i.databaseProvider?`Database: ${te.cyan(i.databaseProvider)}`:null,i.cacheProvider?`Cache: ${te.cyan(i.cacheProvider)}`:null,i.aiTools&&i.aiTools.length>0?`AI tools: ${te.cyan(i.aiTools.join(", "))}`:null].filter(Boolean).join(`
1425
+ `);q.note(o,te.bold("Project Status"));let s=q.spinner();s.start("Checking for updates...");try{let a=await Ke(),d=ge(a),p=(await be(d)).latest;i.version===p?(s.stop("Up to date."),q.log.success(`Already on the latest version (${te.green(p)})`)):(s.stop("Update available."),q.log.warning(`Update available: ${te.yellow(i.version)} \u2192 ${te.green(p)}`),q.log.info(`Open this project in your AI coding agent and ask it to ${te.cyan("update my GenerateSaaS project")} - it fetches and applies the update for you.`))}catch(a){s.stop("Check failed."),a instanceof M&&a.status===401?q.log.warning("Invalid API key. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):q.log.warning(`Could not check for updates: ${L(a)}`)}})}import{readFile as Ia}from"fs/promises";import*as N from"@clack/prompts";import D from"picocolors";function Pa(){return process.env.GENERATESAAS_API_KEY??at()}function Ta(e){return{verdict:e.verdict,plan:e.license?.plan??e.domainInstalls.find(t=>t.ownerPlan)?.ownerPlan??null,mismatchDomain:e.install?.domain??null,ejectedAt:e.install?.ejectedAt??e.domainInstalls.find(t=>t.ejectedAt)?.ejectedAt??null}}function Ra(e){return{verdict:e.verdict??"unknown",ejectedAt:e.ejectedAt??null}}function _a(e){switch(e.verdict){case"licensed":return N.log.success(`${D.green("LICENSED")} - resolves to an account with an active${e.plan?` ${e.plan}`:""} license.`),!0;case"ejected":return N.log.success(`${D.green("EJECTED")} - a licensed buyer opted this install out of telemetry${e.ejectedAt?` on ${e.ejectedAt.slice(0,10)}`:""}. The site is legitimate.`),!0;case"revoked":return N.log.error(`${D.red("REVOKED")} - the owning account no longer holds a plan (refund or chargeback). This deployment is no longer licensed.`),!1;case"token_domain_mismatch":return N.log.error(`${D.red("LEAKED TOKEN")} - this license belongs to a different deployment${e.mismatchDomain?` (${D.cyan(e.mismatchDomain)})`:""}, not this site. The token was copied from a licensed project.`),!1;case"no_license_history":return N.log.error(`${D.red("NO LICENSE HISTORY")} - no license has ever been associated with this site. If it runs GenerateSaaS, treat it as unlicensed.`),!1;default:return N.log.warn(`${D.yellow("UNKNOWN")} - could not cross-reference the records right now. Try again shortly.`),!1}}async function Ai(e,t){let n=process.env.GENERATESAAS_API_URL??st,r=Pa();e.start("Cross-referencing license records...");try{let i=r?Ta(await Yn(n,r,{lkh:t.lkh,nid:t.nid,domain:t.domain})):Ra(await Zt(n,{token:t.token,domain:t.domain}));return e.stop(`${D.green("Checked")} - records cross-referenced`),_a(i)}catch(i){return e.stop(`${D.yellow("Skipped")} - ${L(i)}`),null}}function Oa(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let n=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(n)}function In(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function Ii(e){N.note([`License ID: ${D.cyan(String(e.lid??"unknown"))}`,`Version: ${D.cyan(String(e.ver??"unknown"))}`,`Init version: ${String(e.iver??"unknown")}`,`Frontend: ${String(e.fe??"unknown")}`,`Created: ${In(e.pat)}`,`Last updated: ${In(e.uat)}`,`Expires: ${In(e.exp)}`,`Install ID: ${String(e.nid??"unknown")}`].join(`
1426
+ `),D.yellow("License Details"))}function xa(e){let n=(/^https?:\/\//i.test(e)?e:`https://${e}`).replace(/\/+$/,"");if(n.endsWith("/api"))return[`${n}/license`];try{if(new URL(n).pathname!=="/")return[`${n}/license`]}catch{return[`${n}/license`]}return[`${n}/api/license`,`${n}/license`]}async function Pi(e){let t=N.spinner(),n=null,r="no candidates";for(let s of xa(e)){t.start(`Checking ${s}...`);try{let a=await fetch(s);if(!a.ok){r=`${s} returned ${a.status}`,t.stop(`${D.yellow("Not here")} - ${r}`);continue}let d=(await a.text()).trim();if(!d||d.split(".").length!==3){r=`${s} did not return a JWT`,t.stop(`${D.yellow("Not here")} - ${r}`);continue}n=d,t.stop(`${D.green("Found")} - license endpoint responded`);break}catch(a){r=`${s}: ${L(a)}`,t.stop(`${D.yellow("Unreachable")} - ${r}`)}}if(n===null){N.log.warn(`No license endpoint found (last: ${r}). The site may be ejected, not a GenerateSaaS app, or serving its API elsewhere.`);let s=Ti(e);return s?await Ai(t,{domain:s})??!1:!1}let i;try{i=Oa(n)}catch{return N.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let s=process.env.GENERATESAAS_API_URL??st,a=await Zt(s,{token:n});if(a.valid)t.stop(`${D.green("Valid")} - signature verified`);else return t.stop(`${D.red("Invalid")} - ${a.reason}`),!1}catch{return t.stop(`${D.yellow("Skipped")} - could not reach verification service`),N.log.warn("Signature not verified. Displaying unverified claims:"),Ii(i),!1}return Ii(i),await Ai(t,{token:n,lkh:typeof i.lkh=="string"?i.lkh:void 0,nid:typeof i.nid=="string"?i.nid:void 0,domain:Ti(e)})??!0}function Ti(e){try{return new URL(/^https?:\/\//i.test(e)?e:`https://${e}`).hostname}catch{return}}function Ri(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com or https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,n)=>{if(!t&&!n.file&&(N.cancel("Provide a URL or --file <path>."),process.exit(1)),n.file){let i=(await Ia(n.file,"utf-8")).split(`
1427
+ `).map(s=>s.trim()).filter(s=>s&&!s.startsWith("#"));i.length===0&&(N.cancel("No URLs found in file."),process.exit(1));let o=0;for(let s of i)await Pi(s)&&o++,N.log.info("");N.log.success(`${o}/${i.length} sites verified.`)}else await Pi(t)||process.exit(1)})}import{existsSync as Ca,rmSync as Da}from"fs";import*as ne from"@clack/prompts";function _i(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Ca(fe)?(Da(fe),ne.log.success("API key removed.")):ne.log.info("No API key configured.");return}let n=at();n?ne.log.info(`Current API key: ****${n.slice(-4)}`):ne.log.info("No API key configured.");let r=await ct(),i=ge(r),o=ne.spinner();o.start("Verifying API key...");try{await be(i),o.stop("API key verified."),Te(r),ne.log.success("API key saved.")}catch(s){o.stop("Verification failed."),s instanceof M&&s.status===401?ne.cancel("Invalid API key."):ne.cancel(L(s)),process.exit(1)}})}import{existsSync as Ft,rmSync as Na,readFileSync as Tn,writeFileSync as Oi}from"fs";import{join as De}from"path";import*as K from"@clack/prompts";var La=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/cron-spread.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],$a=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat";
1276
1428
  `,` licenseHeartbeatFunction,
1277
1429
  `]},{file:"packages/api/src/routes/internal/index.ts",removals:[`import licenseRoutes from "./license";
1278
1430
  `,` .route("/license", licenseRoutes)
1279
- `]}];function As(e){return(e&&e.length>0?e.map(n=>pt[n]):Object.values(pt)).map(n=>xe(n,vn))}function An(e){return Vt(e)?(bs(e,{recursive:!0}),!0):!1}function Is(e,t){if(!Vt(e))return!1;let n=In(e,"utf-8"),r=n;for(let o of t)r=r.replace(o,"");return r===n?!1:(Ro(e,r,"utf-8"),!0)}function Ps(e){let t=xe(e,".gitignore");if(!Vt(t))return!1;let n=In(t,"utf-8"),r=n.split(`
1280
- `).filter(o=>!o.includes(".generatesaas")).join(`
1281
- `);return r===n?!1:(Ro(t,r,"utf-8"),!0)}function _o(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),n=xe(t,he),r;try{r=JSON.parse(In(n,"utf-8"))}catch{V.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let o=await V.text({message:'Type "eject" to confirm (this cannot be undone):',validate:s=>{if(s!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(V.isCancel(o)&&(V.cancel("Eject cancelled."),process.exit(0)),r.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r.licenseToken}`},body:JSON.stringify({event:"eject",version:r.version,frontend:r.frontend}),signal:AbortSignal.timeout(5e3)}),V.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{V.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let i=[],a=[];for(let s of As(r.aiTools))An(xe(t,s))&&i.push(s);for(let s of Ss)An(xe(t,s))&&i.push(s);An(xe(t,q))&&i.push(q+"/");for(let s of Es){let p=xe(t,s.file);Is(p,s.removals)?a.push(s.file):Vt(p)&&V.log.warn(`Could not auto-modify ${s.file} - manually remove license/heartbeat references.`)}Ps(t)&&a.push(".gitignore");for(let s of i)V.log.info(`Deleted ${s}`);for(let s of a)V.log.info(`Modified ${s}`);V.log.success("Ejected successfully. This project is now fully standalone.")})}var Ce=new Ts().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.20.0").addHelpText("after",`
1431
+ `]}];function ja(e){return(e&&e.length>0?e.map(n=>pt[n]):Object.values(pt)).map(n=>De(n,kn))}function Pn(e){return Ft(e)?(Na(e,{recursive:!0}),!0):!1}function Ua(e,t){if(!Ft(e))return!1;let n=Tn(e,"utf-8"),r=n;for(let i of t)r=r.replace(i,"");return r===n?!1:(Oi(e,r,"utf-8"),!0)}function Ma(e){let t=De(e,".gitignore");if(!Ft(t))return!1;let n=Tn(t,"utf-8"),r=n.split(`
1432
+ `).filter(i=>!i.includes(".generatesaas")).join(`
1433
+ `);return r===n?!1:(Oi(t,r,"utf-8"),!0)}function xi(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),n=De(t,he),r;try{r=JSON.parse(Tn(n,"utf-8"))}catch{K.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let i=await K.text({message:'Type "eject" to confirm (this cannot be undone):',validate:a=>{if(a!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(K.isCancel(i)&&(K.cancel("Eject cancelled."),process.exit(0)),r.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r.licenseToken}`},body:JSON.stringify({event:"eject",version:r.version,frontend:r.frontend}),signal:AbortSignal.timeout(5e3)}),K.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{K.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let o=[],s=[];for(let a of ja(r.aiTools))Pn(De(t,a))&&o.push(a);for(let a of La)Pn(De(t,a))&&o.push(a);Pn(De(t,W))&&o.push(W+"/");for(let a of $a){let d=De(t,a.file);Ua(d,a.removals)?s.push(a.file):Ft(d)&&K.log.warn(`Could not auto-modify ${a.file} - manually remove license/heartbeat references.`)}Ma(t)&&s.push(".gitignore");for(let a of o)K.log.info(`Deleted ${a}`);for(let a of s)K.log.info(`Modified ${a}`);K.log.success("Ejected successfully. This project is now fully standalone.")})}var Ne=new Va().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.21.0").addHelpText("after",`
1282
1434
  Examples:
1283
1435
  $ generatesaas init Interactive setup
1284
1436
  $ generatesaas init -n my-app -y Quick setup with defaults
1285
1437
  $ generatesaas status Check for updates
1286
1438
  $ generatesaas auth Set or update API key
1287
- `);mo(Ce);wo(Ce);bo(Ce);Po(Ce);To(Ce);_o(Ce);Ce.parseAsync().catch(e=>{Oo.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});
1439
+ `);gi(Ne);Si(Ne);Ei(Ne);Ri(Ne);_i(Ne);xi(Ne);Ne.parseAsync().catch(e=>{Ci.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});