generatesaas 1.22.0 → 1.23.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/index.js +110 -108
  2. package/package.json +1 -1
package/dist/index.js CHANGED
@@ -1,15 +1,15 @@
1
1
  #!/usr/bin/env node
2
- import{Command as Bs}from"commander";import*as Di from"@clack/prompts";import{existsSync as os,readdirSync as as,rmSync as ss}from"fs";import{join as cs,resolve as ls}from"path";import{Option as Z}from"commander";import*as A from"@clack/prompts";import*as ft from"@clack/prompts";import zt from"picocolors";function Cn(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";ft.intro(zt.bgYellow(zt.black(t)))}function Dn(){ft.outro(zt.yellow("Happy building!"))}import*as g from"@clack/prompts";import h from"picocolors";var et={nextjs:{label:"Next.js",hint:"React 19 + Next.js 16"},nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"}},tt={fullstack:{label:"Fullstack",hint:"Frontend hosts the API - works on serverless or long-running"},separate:{label:"Separate",hint:"Standalone Hono backend - long-running runtimes only (Docker, Render, Fly.io, Railway, Coolify, Dokploy)"}},gt={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},ht={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},yt={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},Ce={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},nt={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var we={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var te={node:{label:"Node.js / Docker",hint:"long-running runtime - Render, Fly.io, Railway, Coolify, Dokploy, VPS",edgeRuntime:!1},vercel:{label:"Vercel",hint:"serverless functions",edgeRuntime:!0}},Y={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},ne={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},rt=[{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."}],it=[{architecture:"separate",target:"vercel",reason:"Standalone backends need a long-running runtime. Vercel's per-function TypeScript check conflicts with pnpm's isolated install. Use --architecture fullstack for serverless, or deploy the standalone backend to a long-running runtime (Render, Fly.io, Railway, Coolify, Dokploy, or your own VPS via Docker)."}],Nn=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];function vt(e){let t=Y[e.databaseProvider].managed,n=ne[e.cacheProvider].managed;return e.dockerServices.some(r=>!(r==="postgres"&&t||r==="redis"&&n))}var ae={google:{label:"Google",envVars:[{name:"GOOGLE_CLIENT_ID",secret:!1},{name:"GOOGLE_CLIENT_SECRET",secret:!0}]},github:{label:"GitHub",envVars:[{name:"GITHUB_CLIENT_ID",secret:!1},{name:"GITHUB_CLIENT_SECRET",secret:!0}]},facebook:{label:"Facebook",envVars:[{name:"FACEBOOK_CLIENT_ID",secret:!1},{name:"FACEBOOK_CLIENT_SECRET",secret:!0}]},discord:{label:"Discord",envVars:[{name:"DISCORD_CLIENT_ID",secret:!1},{name:"DISCORD_CLIENT_SECRET",secret:!0}]},x:{label:"X",envVars:[{name:"TWITTER_CLIENT_ID",secret:!1},{name:"TWITTER_CLIENT_SECRET",secret:!0}]}};var Se=["nextjs","nuxt"],De=["fullstack","separate"],Ne=["stripe","polar","none"],Le=["smtp","ses","resend"],$e=["postgres","redis","inngest","mailpit"],je=["claude-code","cursor","codex","gemini-cli","windsurf"],Ue=["user","organization"],se=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],ce=["node","vercel"],le=["postgres","neon","supabase"],pe=["redis","upstash"],Me=["google","github","facebook","discord","x"];function bt(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function kt(e){return/^[a-z][a-z0-9-]*$/.test(e)}function L(e){return e instanceof Error?e.message:String(e)}var Ln=["companion","mcpServer","rag"];function qt(e){if(!Ln.some(n=>e[n]===!0))return e;if(e.ai===!1)throw new Error("--companion / --mcp-server / --rag require AI features; remove --no-ai.");return e.ai===void 0&&(e.ai=!0),e}function $n(e){return Ln.some(n=>e[n]===!0)&&(e.ai=!0),e}function jn(e){let t={};if(e.name!==void 0){if(!kt(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Se.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Se.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org!==!0)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.desktop!==void 0&&(t.desktop=e.desktop),e.desktopAuto!==void 0&&(t.desktopAutoRelease=e.desktopAuto),e.desktopAi!==void 0){if(e.desktopAi===!0&&e.desktop!==!0)throw new Error("--desktop-ai requires --desktop to be enabled.");t.desktopAi=e.desktopAi}if(e.ai!==void 0&&(t.ai=e.ai),e.rag!==void 0&&(t.rag=e.rag),e.companion!==void 0&&(t.companion=e.companion),e.mcpServer!==void 0&&(t.mcpServer=e.mcpServer),e.aiByok!==void 0&&(t.aiByok=e.aiByok),qt(t),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=Yt(e.docker,$e,"docker service")),e.aiTools!==void 0&&(t.aiTools=Yt(e.aiTools,je,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=Yt(e.socialProviders,Me,"social provider")),e.currency!==void 0){if(!se.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${se.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!ce.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${ce.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!le.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${le.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!pe.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${pe.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let n=e.baseUrl.trim();if(n==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let r;try{r=new URL(n)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${r.protocol}//${r.host}`}return t}var de={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,desktop:!1,desktopAutoRelease:!1,desktopAi:!1,ai:!1,rag:!1,companion:!1,mcpServer:!1,aiByok:!0,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function Un(e){let t=e.projectName??de.projectName,n=e.projectDir??`./${t}`,r=e.appName??bt(t),i=e.deploymentTarget??de.deploymentTarget,o=te[i]?.edgeRuntime??!1,a=e.databaseProvider??(o?"neon":de.databaseProvider),s=e.cacheProvider??(o?"upstash":de.cacheProvider),d=e.emailProvider??(o?"resend":de.emailProvider),m=e.dockerServices??(o?de.dockerServices.filter(f=>f!=="postgres"&&f!=="redis"):de.dockerServices),p={...de,...e,projectName:t,appName:r,projectDir:n,deploymentTarget:i,databaseProvider:a,cacheProvider:s,emailProvider:d,dockerServices:m};p.paymentProvider==="none"&&(p.credits=!1),p.multiTenancy||(p.billingScope="user"),p.ai||(p.aiByok=de.aiByok);for(let f of rt){if(p.deploymentTarget!==f.target)continue;let w=p.databaseProvider===f.provider?"database":"cache";if(p.databaseProvider===f.provider||p.cacheProvider===f.provider)throw new Error(`Incompatible: --deploy ${f.target} + --${w} ${f.provider}. ${f.reason}`)}for(let f of it)if(p.architecture===f.architecture&&p.deploymentTarget===f.target)throw new Error(`Incompatible: --architecture ${f.architecture} + --deploy ${f.target}. ${f.reason}`);return p}function Yt(e,t,n){if(e.trim()==="")return[];let r=e.split(",").map(o=>o.trim()).filter(Boolean),i=r.filter(o=>!t.includes(o));if(i.length>0)throw new Error(`Invalid ${n}(s): ${i.join(", ")}. Valid values: ${t.join(", ")}`);return r}function E(e){g.isCancel(e)&&(g.cancel("Setup cancelled."),process.exit(0))}function Jt(e){let t=[];e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0}));for(let n of e.socialProviders){let r=ae[n];for(let i of r.envVars)t.push({key:i.name,message:`${i.name} (${r.label}, optional):`,secret:i.secret})}return e.demo&&t.push({key:"TURNSTILE_SECRET_KEY",message:"Cloudflare Turnstile secret key (optional):",secret:!0}),t}async function Mn(e,t){let n=!1;e&&qt(e),g.log.info(h.bold("Project"));let r=e?.projectName??await(async()=>{n=!0;let c=await g.text({message:"Project name:",placeholder:"my-saas",validate:u=>{if(!u?.trim())return"Project name is required.";if(!kt(u))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return E(c),c})(),i=e?.appName??await(async()=>{n=!0;let c=await g.text({message:"App name:",initialValue:bt(r),validate:u=>{if(!u?.trim())return"App name is required."}});return E(c),c})(),o=e?.projectDir??await(async()=>{n=!0;let c=await g.text({message:"Project location:",initialValue:`./${r}`});return E(c),c==="."?process.cwd():c})(),a=e?.frontend??await(async()=>{n=!0;let c=Object.keys(et),u=await g.select({message:"Frontend framework:",options:c.map(k=>({value:k,label:et[k].label,hint:et[k].hint}))});return E(u),u})();g.log.info(h.bold("Infrastructure"));let s=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){n=!0;let c=await g.select({message:"Deployment target:",options:ce.map(u=>({value:u,label:te[u].label,hint:te[u].hint}))});E(c),s=c}let d=e?.architecture?it.find(c=>c.architecture===e.architecture&&c.target===s):void 0;if(d)throw new Error(`Incompatible: --architecture ${d.architecture} + --deploy ${d.target}. ${d.reason}`);let m=new Set(it.filter(c=>c.target===s).map(c=>c.architecture)),p=De.filter(c=>!m.has(c)),f=e?.architecture??await(async()=>{if(p.length===1){let u=p[0];return g.log.info(`Auto-selected ${tt[u].label} architecture (only compatible option for ${te[s].label}).`),u}n=!0;let c=await g.select({message:"Architecture:",options:p.map(u=>({value:u,label:tt[u].label,hint:tt[u].hint}))});return E(c),c})(),w=e?.databaseProvider??await(async()=>{n=!0;let c=le.filter(k=>!rt.some(G=>G.target===s&&G.provider===k));if(c.length===1){let k=c[0];return g.log.info(`Auto-selected ${Y[k].label} (only compatible option for ${te[s].label}).`),k}let u=await g.select({message:"Database provider:",options:c.map(k=>({value:k,label:Y[k].label,hint:Y[k].hint}))});return E(u),u})(),b=e?.cacheProvider??await(async()=>{n=!0;let c=pe.filter(k=>!rt.some(G=>G.target===s&&G.provider===k));if(c.length===1){let k=c[0];return g.log.info(`Auto-selected ${ne[k].label} (only compatible option for ${te[s].label}).`),k}let u=await g.select({message:"Cache provider:",options:c.map(k=>({value:k,label:ne[k].label,hint:ne[k].hint}))});return E(u),u})();if(te[s]?.edgeRuntime){let c=Nn.map(u=>` - ${u}`).join(`
3
- `);g.note(c,"Unavailable on edge runtime")}g.log.info(h.bold("Features"));let S=e?.paymentProvider??await(async()=>{n=!0;let c=await g.select({message:"Payment provider:",options:Ne.map(u=>({value:u,label:gt[u].label,hint:gt[u].hint}))});return E(c),c})(),J=e?.defaultCurrency??await(async()=>{if(S==="none")return"USD";n=!0;let c=await g.select({message:"Default currency:",options:se.map(u=>({value:u,label:u,hint:we[u].name}))});return E(c),c})(),V=e?.emailProvider??await(async()=>{n=!0;let c=await g.select({message:"Email provider:",options:Le.map(u=>({value:u,label:ht[u].label,hint:ht[u].hint}))});return E(c),c})(),R=e?.multiTenancy??await(async()=>{n=!0;let c=await g.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return E(c),c})(),oe=R?e?.billingScope??"user":"user";if(R&&e?.billingScope===void 0){n=!0;let c=await g.select({message:"Billing scope:",options:Ue.map(u=>({value:u,label:yt[u].label,hint:yt[u].hint}))});E(c),oe=c}let B=e?.blog??await(async()=>{n=!0;let c=await g.confirm({message:"Enable blog?",initialValue:!0});return E(c),c})(),v=e?.docs??await(async()=>{n=!0;let c=await g.confirm({message:"Include docs app? (self-hosted Fumadocs documentation site)",initialValue:!1});return E(c),c})(),P=t?.desktopAllowed!==!1,O=e?.desktop??(P?await(async()=>{n=!0;let c=await g.confirm({message:"Include the desktop app? (apps/tauri - cross-platform, built with Tauri, device-auth)",initialValue:!1});return E(c),c})():(g.log.info(h.dim("Desktop app: available on the Pro plan and up - skipped.")),!1)),z=O?e?.desktopAutoRelease??await(async()=>{n=!0;let c=await g.select({message:"Desktop release trigger:",options:[{value:!1,label:"Manual only",hint:"run from the Actions tab (saves CI minutes)"},{value:!0,label:"Automatic",hint:"release on every CI success on main"}],initialValue:!1});return E(c),c})():!1,I=e?.ai??await(async()=>{n=!0;let c=await g.confirm({message:"Add AI features? (chat, models, schedules, integrations - and unlocks the companion + MCP server)",initialValue:!1});return E(c),c})(),T=I?e?.rag??await(async()=>{n=!0;let c=await g.confirm({message:"Add a server-side knowledge base (keyword search over your knowledge/ docs)?",initialValue:!1});return E(c),c})():!1,be=I?e?.companion??await(async()=>{n=!0;let c=await g.confirm({message:"Add the companion daemon? A small program your users install on their own machine or VPS to run their Claude Code / Codex / OpenCode subscription for this app 24/7 - the AI runs on their hardware, not yours.",initialValue:!1});return E(c),c})():!1,Tn=I?e?.mcpServer??await(async()=>{n=!0;let c=await g.confirm({message:"Add the outward MCP server? Lets external agents (Claude Code, Codex, Hermes, OpenClaw) control the app on a user's behalf over an authenticated MCP endpoint.",initialValue:!1});return E(c),c})():!1,Rn=I?e?.aiByok??await(async()=>{n=!0;let c=await g.confirm({message:"AI BYOK mode? (end-users bring their own provider key; no = operator-keyed, credit-metered)",initialValue:!0});return E(c),c})():!0,_n=e?.revenueSharing??await(async()=>{n=!0;let c=await g.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return E(c),c})(),On=S==="none"?!1:e?.credits??await(async()=>{n=!0;let c=await g.confirm({message:"Enable credits? (metered usage on top of subscription plans)",initialValue:!0});return E(c),c})(),ut=e?.socialProviders??await(async()=>{n=!0;let c=Me.map(k=>({value:k,label:ae[k].label,hint:`requires ${ae[k].envVars.map(G=>G.name).join(" / ")}`})),u=await g.multiselect({message:"Which social login providers should the sign-in screen show?",options:c,initialValues:[],required:!1});return E(u),u})();g.log.info(h.bold("Tooling"));let Kt=e?.dockerServices??await(async()=>{n=!0;let c=[...$e].filter(H=>H!=="mailpit");V==="smtp"&&c.push("mailpit");let u=c.map(H=>({value:H,label:Ce[H].label,hint:Ce[H].hint})),k=u.map(H=>H.value).filter(H=>!(H==="postgres"&&(w==="neon"||w==="supabase")||H==="redis"&&b==="upstash")),G=await g.multiselect({message:"Which services should we set up in Docker for you?",options:u,initialValues:k,required:!1});return E(G),G})(),Gt=e?.aiTools??await(async()=>{n=!0;let c=je.map(k=>({value:k,label:nt[k].label})),u=await g.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return E(u),u})(),Ht=e?.demo,mt=Jt({databaseProvider:w,cacheProvider:b,paymentProvider:S,emailProvider:V,socialProviders:ut,demo:Ht}),Qe={};if(mt.length>0&&n){g.log.info(h.bold("Credentials")+h.dim(" all optional - press Enter to skip, fill in .env later"));for(let c of mt)if(n=!0,c.secret){let u=await g.password({message:c.message,mask:"*"});E(u),typeof u=="string"&&u.trim()&&(Qe[c.key]=u.trim())}else{let u=await g.text({message:c.message,placeholder:c.placeholder});E(u),typeof u=="string"&&u.trim()&&(Qe[c.key]=u.trim())}}if(n){let c=[` Name: ${h.cyan(r)}`,` App name: ${h.cyan(i)}`,` Location: ${h.cyan(o)}`,` Frontend: ${h.cyan(et[a].label)}`,` Architecture: ${h.cyan(tt[f].label)}`].join(`
4
- `),u=[` Deploy target: ${h.cyan(te[s]?.label??"Node.js / Docker")}`,` Database: ${h.cyan(Y[w].label)}`,` Cache: ${h.cyan(ne[b].label)}`,Kt.length>0?` Docker: ${h.cyan(Kt.map(ke=>Ce[ke].label).join(", "))}`:` Docker: ${h.dim("none")}`].filter(Boolean).join(`
5
- `),k=[S!=="none"?` Payment: ${h.cyan(gt[S].label)} (${J})`:` Payment: ${h.dim("none")}`,` Credits: ${On?h.cyan("Yes"):h.dim("No")}`,` AI features: ${I?h.cyan("Yes"):h.dim("No")}`,...I?[` AI mode: ${h.cyan(Rn?"BYOK":"Operator-keyed (credits)")}`,` RAG knowledge: ${T?h.cyan("Yes"):h.dim("No")}`,` Companion: ${be?h.cyan("Yes"):h.dim("No")}`,` MCP server: ${Tn?h.cyan("Yes"):h.dim("No")}`]:[],` Email: ${h.cyan(ht[V].label)}`,` Multi-tenancy: ${R?h.cyan("Yes")+` (billing: ${yt[oe].label})`:h.dim("No")}`,` Blog: ${B?h.cyan("Yes"):h.dim("No")}`,` Docs app: ${v?h.cyan("Yes"):h.dim("No")}`,` Desktop app: ${O?h.cyan("Yes"):h.dim("No")}`,...O?[` Releases: ${h.cyan(z?"Automatic on CI":"Manual only")}`]:[],` Rev. sharing: ${_n?h.cyan("Yes"):h.dim("No")}`,ut.length>0?` Social login: ${h.cyan(ut.map(ke=>ae[ke].label).join(", "))}`:` Social login: ${h.dim("none")}`,Gt.length>0?` AI tools: ${h.cyan(Gt.map(ke=>nt[ke].label).join(", "))}`:` AI tools: ${h.dim("none")}`].join(`
6
- `),G=[h.bold("Project"),c,"",h.bold("Infrastructure"),u,"",h.bold("Features"),k];if(mt.length>0){let ke=mt.map(xn=>{let Ni=Qe[xn.key]?h.green("provided"):h.dim("skipped");return` ${xn.key}: ${Ni}`}).join(`
7
- `);G.push("",h.bold("Credentials"),ke)}g.note(G.join(`
8
- `),"Summary");let H=await g.confirm({message:"Proceed with these settings?"});(g.isCancel(H)||!H)&&(g.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:i,projectDir:o,frontend:a,architecture:f,deploymentTarget:s,databaseProvider:w,cacheProvider:b,paymentProvider:S,emailProvider:V,multiTenancy:R,billingScope:oe,blog:B,docs:v,desktop:O,desktopAutoRelease:z,desktopAi:O?e?.desktopAi??!1:!1,ai:I,rag:T,companion:be,mcpServer:Tn,aiByok:Rn,revenueSharing:_n,credits:On,dockerServices:Kt,aiTools:Gt,socialProviders:ut,defaultCurrency:J,...Object.keys(Qe).length>0?{credentials:Qe}:{},...e?.baseUrl!==void 0?{baseUrl:e.baseUrl}:{},...Ht!==void 0?{demo:Ht}:{}}}import{createReadStream as Gi}from"fs";import{mkdir as Hi}from"fs/promises";import{Readable as zi}from"stream";import{pipeline as Yn}from"stream/promises";import{extract as Yi}from"tar";import{join as Ee}from"path";import{homedir as Li}from"os";var ot=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",W=".generatesaas",fe=Ee(W,"manifest.json"),Vn=Ee(W,"hashes.json"),wt=Ee(W,"template-hashes.json"),St=Ee(W,"template"),Bn=Ee(W,"staging"),Fn=Ee(W,"staging.json"),ue=Ee(Li(),".generatesaas");var M=class extends Error{constructor(n,r,i){super(r);this.status=n;this.body=i}status;body;name="ApiError"};function me(e){return{apiKey:e,baseUrl:ot}}async function ge(e,t,n){let r=`${e.baseUrl}${t}`,i=await fetch(r,{...n,headers:{...n?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!i.ok){let o,a;try{a=await i.json(),o=a.error??`API ${i.status}: ${t}`}catch{o=`API ${i.status}: ${t}`}throw new M(i.status,o,a)}return i}import{existsSync as $i,readFileSync as ji,writeFileSync as Ui,mkdirSync as Mi}from"fs";import{dirname as Vi}from"path";import*as he from"@clack/prompts";function at(){if(!$i(ue))return null;try{let e=JSON.parse(ji(ue,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&he.log.warning(`Found old GitHub token in ${ue}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function Ae(e){Mi(Vi(ue),{recursive:!0}),Ui(ue,JSON.stringify({apiKey:e},null," ")+`
9
- `,{mode:384})}async function Ve(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let n=at();if(n)return n;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return st()}async function st(){let e=await he.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return he.isCancel(e)&&(he.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function ye(e){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{latest:"0.0.0-ci",versions:[{version:"0.0.0-ci",date:new Date().toISOString(),breaking:!1}],entitlements:null}:await(await ge(e,"/versions")).json()}async function Wt(e,t){try{return await(await ge(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(n){if(n instanceof M&&n.status===404)return null;throw n}}async function Kn(e,t){return await(await ge(e,`/skill/${encodeURIComponent(t)}`)).json()}function Et(e){if(!(e instanceof M)||e.status!==403)return null;let t=e.body;return!t||t.code!=="update_window_expired"?null:{message:e.message,lastAllowedVersion:t.lastAllowedVersion??null}}function Gn(e){return{frontend:e.frontend,architecture:e.architecture,deployTarget:e.deploymentTarget,database:e.databaseProvider,cache:e.cacheProvider,payment:e.paymentProvider,email:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,credits:e.credits,revenueSharing:e.revenueSharing,socialProviders:e.socialProviders,aiTools:e.aiTools,currency:e.defaultCurrency}}async function Xt(e,t){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{token:"offline-test-token",licenseId:"offline-test-license-id",installId:t.installId}:await(await ge(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Hn(e,t){return await(await ge(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function Zt(e,t){let n=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)});if(!n.ok)throw new Error(`Verification service returned ${n.status}`);return await n.json()}async function zn(e,t,n){let r=await fetch(`${e}/license/inspect`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify(n)});if(!r.ok){let i=await r.json().catch(()=>null);throw new Error(i?.error??`Inspect endpoint returned ${r.status}`)}return await r.json()}var Qt=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".wrangler",".devcontainer","playwright-report","test-results"]),en=new Set(["pnpm-lock.yaml"]);function Be(e){if(tn(e))return!0;for(let t of e.split("/"))if(en.has(t))return!0;return!1}var Bi=new Set(["data","mksaas","references","scripts",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","README.md","TODO.md","OVERVIEW.md"]),Fi=["scripts/knowledge-corpus.ts","scripts/knowledge-corpus.test.ts","scripts/knowledge-lint.ts","scripts/knowledge-build.ts","scripts/dev-ai-setup.ts","scripts/docs-lint.ts"],Ki=["docs/superpowers","packages/cli","packages/cli-api","apps/companion","infra/docker-compose.yml",".claude/commands",".claude/skills/web-next-port",".claude/skills/web-next-port-workspace",".claude/settings.local.json",".claude/worktrees"];function tn(e){let t=e.split("/");for(let n of t)if(Qt.has(n))return!0;if(Fi.includes(e))return!1;if(Bi.has(t[0]))return!0;for(let n of Ki)if(e===n||e.startsWith(n+"/"))return!0;return!1}async function At(e,t,n){await Hi(n,{recursive:!0});let r=process.env.GENERATESAAS_TEMPLATE_TARBALL;if(r){await Yn(Gi(r),qn(n));return}let i=await ge(e,`/template/${encodeURIComponent(t)}`);if(!i.body)throw new Error("Empty response body");let o=zi.fromWeb(i.body);await Yn(o,qn(n))}function qn(e){return Yi({cwd:e,strip:1,filter:t=>{let n=t.replace(/^[^/]+\//,"");return n?!tn(n):!0},sync:!1})}import{access as qi,readdir as Ji,readFile as It,rm as nn,writeFile as Pt}from"fs/promises";import{join as ve}from"path";var Wi=["apps/web-nuxt/public/images/blog","apps/web-next/public/images/blog","packages/content/en/blog","packages/content/ro/blog"];async function Xn(e){await Promise.all(Wi.map(t=>nn(ve(e,t),{recursive:!0,force:!0})))}var Xi="packages/config/src/blog.ts";async function Zn(e){let t=ve(e,Xi),n=await It(t,"utf-8"),r=Jn(Jn(n,"blogCategories",t),"blogAuthors",t);await Pt(t,r)}function Jn(e,t,n){let r=new RegExp(`(export const ${t}\\b[^=]*=\\s*)\\[[\\s\\S]*?\\];`);if(!r.test(e))throw new Error(`emptyBlogConfig: could not find the \`export const ${t} = [...]\` declaration in ${n}. The boilerplate blog config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);return e.replace(r,"$1[];")}async function Qn(e){let t=ve(e,"packages/i18n/translations"),n;try{n=await Ji(t)}catch{return}for(let r of n){let i=ve(t,r,"web.json"),o;try{o=await It(i,"utf-8")}catch{continue}let a=JSON.parse(o);!a.blog||a.blog.categories===void 0||(a.blog.categories={},await Pt(i,JSON.stringify(a,null," ")+`
10
- `))}}var Zi="packages/config/src/ai/tasks.ts";async function er(e){let t=ve(e,Zi),n=await It(t,"utf-8"),r=n.replace(/\n?[\t ]*\/\/ gsaas:demo-ai-task-start[\s\S]*?\/\/ gsaas:demo-ai-task-end/,"");if(r===n)throw new Error(`removeDemoAiTasks: could not find the \`gsaas:demo-ai-task\` markers in ${t}. The boilerplate AI tasks config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);await Pt(t,r)}var Wn="apps/tauri/resources/ai-skills/example-skill";async function tr(e){let t=ve(e,Wn);try{await qi(t)}catch{throw new Error(`removeExampleSkill: expected the demo skill at ${Wn}, but it was missing (boilerplate drift). The desktop AI layer is kept for this build, so the skill must exist.`)}await nn(t,{recursive:!0})}async function nr(e,t){t.includes("claude-code")||await nn(ve(e,".claude"),{recursive:!0,force:!0})}async function rr(e,t){let n=ve(e,".claude","settings.json"),r;try{r=await It(n,"utf8")}catch{return}let i=JSON.parse(r);delete i.alwaysThinkingEnabled,delete i.enableAllProjectMcpServers,i.env&&(delete i.env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS,Object.keys(i.env).length===0&&delete i.env),i.permissions?.allow&&(i.permissions.allow=i.permissions.allow.filter(o=>Qi(o,t))),await Pt(n,JSON.stringify(i,null," ")+`
11
- `)}function Qi(e,t){return!(e.startsWith("mcp__")||t!=="nuxt"&&e.includes("nuxt"))}import{join as ir}from"path";import{mkdir as eo,readdir as to,rm as no,rmdir as ro,writeFile as io}from"fs/promises";import{dirname as Tt,join as oo,relative as ao,sep as so}from"path";function Ie(e){return e.split(so).join("/")}async function Rt(e){await eo(e,{recursive:!0})}async function l(e,t){await Rt(Tt(e)),await io(e,t,"utf-8")}async function rn(e,t){await no(e,{force:!0});let n=Tt(e);for(;n!==t&&n!==Tt(n);){try{await ro(n)}catch{return}n=Tt(n)}}async function Pe(e,t,n){let r=[],i=await to(e,{withFileTypes:!0});for(let o of i){let a=oo(e,o.name),s=Ie(ao(t,a));n(s)||(o.isDirectory()?r.push(...await Pe(a,t,n)):o.isFile()&&r.push(a))}return r}var co={postgres:"Postgres",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"},lo={resend:"Resend",ses:"Amazon SES",smtp:"SMTP"},po={redis:"Redis",upstash:"Upstash Redis"},uo={node:"Node.js / Docker",vercel:"Vercel"},mo={stripe:"Stripe",polar:"Polar"};function fo(e){let t=e.frontend==="nuxt",n=t?"Nuxt 4":"Next.js 16",r=t?"apps/web-nuxt":"apps/web-next",i=t?"`app/` pages + components + composables":"`app/` routes, `components/`, `lib/`",o=e.architecture==="fullstack",a=o?"(fullstack - Hono API mounted inside the app)":"(separate - standalone Hono backend)",s=o?`Mounted inside \`${r}\`. A standalone \`apps/backend\` is also kept (inert) so you can switch to separate later.`:"Runs from `apps/backend`; the frontend reaches it over HTTP.",d=po[e.cacheProvider],m=uo[e.deploymentTarget],p=e.paymentProvider==="none"?"":`
12
- - **Payments:** ${mo[e.paymentProvider]}`,f=e.desktop?", and the desktop app (built with Tauri) under `docs/desktop/`":"",w=e.companion?", and the OpenCompanion daemon under `docs/opencompanion/`":"",b=t?"`$t('key')` in templates (global helper); `useI18n()` from `vue-i18n` in `<script setup>` for `locale`/`setLocale`/`t()`.":"`useTranslations()` from `next-intl` in components; messages are loaded in `apps/web-next/i18n/request.ts`.",S=t?"**Navigation:** always use `localePath()` for paths (hardcoded paths break non-default locales); `await navigateTo()` in SSR.":"**Navigation:** `next/link` for links; `redirect()` from `next/navigation` for programmatic redirects in Server Components.";return`# AGENTS.md
2
+ import{Command as ic}from"commander";import*as Ki from"@clack/prompts";import{existsSync as bs,readdirSync as ks,rmSync as ws}from"fs";import{join as Ss,resolve as Es}from"path";import{Option as Z}from"commander";import*as I from"@clack/prompts";import*as vt from"@clack/prompts";import Jt from"picocolors";function Un(e){let t=e?` GenerateSaaS v${e} `:" GenerateSaaS ";vt.intro(Jt.bgYellow(Jt.black(t)))}function Mn(){vt.outro(Jt.yellow("Happy building!"))}import*as g from"@clack/prompts";import h from"picocolors";var nt={nextjs:{label:"Next.js",hint:"React 19 + Next.js 16"},nuxt:{label:"Nuxt",hint:"Vue 3 + Nuxt 4"}},rt={fullstack:{label:"Fullstack",hint:"Frontend hosts the API - works on serverless or long-running"},separate:{label:"Separate",hint:"Standalone Hono backend - long-running runtimes only (Docker, Render, Fly.io, Railway, Coolify, Dokploy)"}},bt={stripe:{label:"Stripe"},polar:{label:"Polar"},none:{label:"None",hint:"disable payments"}},kt={smtp:{label:"SMTP",hint:"Mailpit for local dev"},ses:{label:"Amazon SES"},resend:{label:"Resend"}},wt={user:{label:"Per user",hint:"each user has their own subscription"},organization:{label:"Per organization",hint:"org subscription shared by members"}},$e={postgres:{label:"PostgreSQL",hint:"port 5432",port:5432},redis:{label:"Redis",hint:"port 6379",port:6379},inngest:{label:"Inngest",hint:"port 8288",port:8288},mailpit:{label:"Mailpit",hint:"port 1025",port:1025}},it={"claude-code":{label:"Claude Code"},cursor:{label:"Cursor"},codex:{label:"Codex"},"gemini-cli":{label:"Gemini CLI"},windsurf:{label:"Windsurf"}};var Ee={USD:{symbol:"$",name:"US Dollar",place:"left",space:!1},EUR:{symbol:"\u20AC",name:"Euro",place:"right",space:!1},GBP:{symbol:"\xA3",name:"British Pound",place:"left",space:!1},CAD:{symbol:"CA$",name:"Canadian Dollar",place:"left",space:!1},AUD:{symbol:"A$",name:"Australian Dollar",place:"left",space:!1},BRL:{symbol:"R$",name:"Brazilian Real",place:"left",space:!1},JPY:{symbol:"\xA5",name:"Japanese Yen",place:"left",space:!1}};var re={node:{label:"Node.js / Docker",hint:"long-running runtime - Render, Fly.io, Railway, Coolify, Dokploy, VPS",edgeRuntime:!1},vercel:{label:"Vercel",hint:"serverless functions",edgeRuntime:!0}},J={postgres:{label:"PostgreSQL (self-hosted)",hint:"local Docker, drizzle-orm/node-postgres",managed:!1,envVars:[{key:"DATABASE_URL",defaultValue:"postgres://postgres:postgres@localhost:5432/saas"}]},neon:{label:"Neon",hint:"serverless Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Neon connection string"}]},supabase:{label:"Supabase",hint:"managed Postgres",managed:!0,envVars:[{key:"DATABASE_URL",comment:"# TODO: Add your Supabase connection string"}]}},ie={redis:{label:"Redis (self-hosted)",hint:"local Docker, ioredis",managed:!1,envVars:[{key:"REDIS_URL",defaultValue:"redis://localhost:6379"}]},upstash:{label:"Upstash",hint:"serverless Redis",managed:!0,envVars:[{key:"UPSTASH_REDIS_REST_URL",comment:"# TODO: Add your Upstash REST URL"},{key:"UPSTASH_REDIS_REST_TOKEN",comment:"# TODO: Add your Upstash REST token"}]}},ot=[{target:"vercel",provider:"redis",reason:"Vercel serverless cannot maintain persistent Redis connections. Consider Upstash."}],at=[{architecture:"separate",target:"vercel",reason:"Standalone backends need a long-running runtime. Vercel's per-function TypeScript check conflicts with pnpm's isolated install. Use --architecture fullstack for serverless, or deploy the standalone backend to a long-running runtime (Render, Fly.io, Railway, Coolify, Dokploy, or your own VPS via Docker)."}],Vn=["Local file storage (sharp, geoip-lite)","SMTP email (use Resend or SES instead)","Content API git integration"];function St(e){let t=J[e.databaseProvider].managed,n=ie[e.cacheProvider].managed;return e.dockerServices.some(r=>!(r==="postgres"&&t||r==="redis"&&n))}var se={google:{label:"Google",envVars:[{name:"GOOGLE_CLIENT_ID",secret:!1},{name:"GOOGLE_CLIENT_SECRET",secret:!0}]},github:{label:"GitHub",envVars:[{name:"GITHUB_CLIENT_ID",secret:!1},{name:"GITHUB_CLIENT_SECRET",secret:!0}]},facebook:{label:"Facebook",envVars:[{name:"FACEBOOK_CLIENT_ID",secret:!1},{name:"FACEBOOK_CLIENT_SECRET",secret:!0}]},discord:{label:"Discord",envVars:[{name:"DISCORD_CLIENT_ID",secret:!1},{name:"DISCORD_CLIENT_SECRET",secret:!0}]},x:{label:"X",envVars:[{name:"TWITTER_CLIENT_ID",secret:!1},{name:"TWITTER_CLIENT_SECRET",secret:!0}]}};var Ae=["nextjs","nuxt"],je=["fullstack","separate"],Ue=["stripe","polar","none"],Me=["smtp","ses","resend"],Ve=["postgres","redis","inngest","mailpit"],Be=["claude-code","cursor","codex","gemini-cli","windsurf"],Fe=["user","organization"],ce=["USD","EUR","GBP","CAD","AUD","BRL","JPY"],le=["node","vercel"],pe=["postgres","neon","supabase"],de=["redis","upstash"],Ke=["google","github","facebook","discord","x"];function Et(e,t){return e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")||t}function Ge(e){return e.split("-").map(t=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}function At(e){return/^[a-z][a-z0-9-]*$/.test(e)}function N(e){return e instanceof Error?e.message:String(e)}function Ie(e){let t=e?.trim();return t?`${Ge(t)} Companion`:"My Companion"}var Bn=[{key:"frontend",label:"Frontend framework",hint:"Nuxt (Vue) or Next.js (React).",category:"Project",kind:"enum",default:"nuxt",choices:Ae,adoptable:!1,impact:"structural"},{key:"architecture",label:"Architecture",hint:"Fullstack (frontend hosts the API) or a standalone Hono backend.",category:"Infrastructure",kind:"enum",default:"fullstack",choices:je,adoptable:!1,impact:"structural"},{key:"deploymentTarget",label:"Deployment target",hint:"Node.js / Docker or Vercel serverless.",category:"Infrastructure",kind:"enum",default:"node",choices:le,adoptable:!1,impact:"config"},{key:"databaseProvider",label:"Database provider",hint:"Self-hosted PostgreSQL, Neon, or Supabase.",category:"Infrastructure",kind:"enum",default:"postgres",choices:pe,adoptable:!1,impact:"config"},{key:"cacheProvider",label:"Cache provider",hint:"Self-hosted Redis or Upstash.",category:"Infrastructure",kind:"enum",default:"redis",choices:de,adoptable:!1,impact:"config"},{key:"paymentProvider",label:"Payment provider",hint:"Stripe, Polar, or none.",category:"Features",kind:"enum",default:"none",choices:Ue,adoptable:!1,impact:"structural"},{key:"defaultCurrency",label:"Default currency",hint:"Billing and pricing currency.",category:"Features",kind:"enum",default:"USD",choices:ce,adoptable:!1,impact:"config"},{key:"emailProvider",label:"Email provider",hint:"SMTP, Amazon SES, or Resend.",category:"Features",kind:"enum",default:"smtp",choices:Me,adoptable:!1,impact:"config"},{key:"multiTenancy",label:"Multi-tenancy (organizations)",hint:"Adds organizations - teams, members, and shared resources.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"billingScope",label:"Billing scope",hint:"Whether subscriptions belong to a user or an organization.",category:"Features",kind:"enum",default:"user",choices:Fe,adoptable:!1,impact:"config",requires:e=>e.multiTenancy===!0,requiresLabel:"requires multi-tenancy"},{key:"blog",label:"Blog",hint:"Adds the marketing blog (content collection, list and post pages).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"docs",label:"Docs app",hint:"Adds the self-hosted Fumadocs documentation site (apps/docs).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktop",label:"Desktop app",hint:"Adds the cross-platform desktop app (apps/tauri, built with Tauri).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktopAutoRelease",label:"Desktop auto-release",hint:"Release the desktop app on every CI success (vs manual-only).",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"desktopAi",label:"Desktop AI orchestration",hint:"Adds the desktop AI agents layer (requires the desktop app).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"ai",label:"AI features",hint:"Adds the AI surface (chat, models, schedules, integrations) and unlocks the companion, MCP server, knowledge base, and BYOK options. Off keeps config.ai.enabled false so the AI nav stays hidden.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"rag",label:"Server-side knowledge base",hint:"Adds a keyword knowledge base over your `knowledge/` docs.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"companion",label:"Companion daemon",hint:"Vendors a brandable device companion your users install to run their own AI subscriptions (and any device-side work you add). You own it: source lives in this repo; one command publishes it to a public GitHub repo YOU own; releases and driver updates are your job; unsigned builds work out of the box (signing is optional and paid).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"companionName",label:"Companion name",hint:"What your users install - the display name of your branded companion daemon.",category:"Features",kind:"text",default:e=>Ie(e.projectName),adoptable:!0,impact:"config",requires:e=>e.companion===!0,requiresLabel:"requires the companion"},{key:"mcpServer",label:"Outward MCP server",hint:"Exposes the app's capability layer to external agents as an authenticated MCP OAuth server.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"aiByok",label:"AI billing mode (BYOK)",hint:"BYOK: end-users bring their own provider key, no credit metering. Off: operator-keyed, credit-metered platform mode.",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"credits",label:"Metered credits",hint:"Adds metered usage credits on top of subscription plans.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.paymentProvider!==void 0&&e.paymentProvider!=="none",requiresLabel:"requires a payment provider"},{key:"revenueSharing",label:"Revenue sharing",hint:"Opt-in MRR leaderboard with dofollow backlinks.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"socialProviders",label:"Social login providers",hint:"Which social sign-in buttons the auth screen shows.",category:"Features",kind:"multiselect",default:[],choices:Ke,adoptable:!1,impact:"config"},{key:"dockerServices",label:"Docker services",hint:"Local services scaffolded in docker-compose.",category:"Tooling",kind:"multiselect",default:[],choices:Ve,adoptable:!1,impact:"config"},{key:"aiTools",label:"AI coding tools",hint:"Which AI assistants receive the bundled skill files.",category:"Tooling",kind:"multiselect",default:[],choices:Be,adoptable:!1,impact:"config"}];function Hi(e,t){return e[t]!==void 0}function Fn(e){return Bn.filter(t=>t.adoptable&&!Hi(e,t.key)&&(t.requires?t.requires(e):!0)).map(t=>({key:t.key,label:t.label,hint:t.hint,kind:t.kind,default:typeof t.default=="function"?t.default(e):t.default,...t.choices?{choices:t.choices}:{},impact:t.impact,...t.requiresLabel?{requiresLabel:t.requiresLabel}:{}}))}function Kn(e){let t={};for(let n of Bn)if(typeof n.default=="function"){if(n.requires&&!n.requires(e))continue;t[n.key]=n.default(e)}else t[n.key]=Array.isArray(n.default)?[...n.default]:n.default;return{...t,...e}}var Gn=["companion","mcpServer","rag"];function Wt(e){if(!Gn.some(n=>e[n]===!0))return e;if(e.ai===!1)throw new Error("--companion / --mcp-server / --rag require AI features; remove --no-ai.");return e.ai===void 0&&(e.ai=!0),e}function Hn(e){return Gn.some(n=>e[n]===!0)&&(e.ai=!0),e}function zn(e){let t={};if(e.name!==void 0){if(!At(e.name))throw new Error(`Invalid project name "${e.name}". Use lowercase letters, numbers, and hyphens only. Must start with a letter.`);t.projectName=e.name}if(e.appName!==void 0){if(!e.appName.trim())throw new Error("App name cannot be empty.");t.appName=e.appName}if(e.location!==void 0?t.projectDir=e.location==="."?process.cwd():e.location:t.projectName!==void 0&&(t.projectDir=`./${t.projectName}`),e.frontend!==void 0){if(!Ae.includes(e.frontend))throw new Error(`Invalid frontend "${e.frontend}". Valid values: ${Ae.join(", ")}`);t.frontend=e.frontend}if(e.architecture!==void 0&&(t.architecture=e.architecture),e.payment!==void 0&&(t.paymentProvider=e.payment),e.email!==void 0&&(t.emailProvider=e.email),e.org!==void 0&&(t.multiTenancy=e.org),e.billingScope!==void 0){if(e.org!==!0)throw new Error("--billing-scope requires --org to be enabled.");t.billingScope=e.billingScope}if(e.blog!==void 0&&(t.blog=e.blog),e.docs!==void 0&&(t.docs=e.docs),e.desktop!==void 0&&(t.desktop=e.desktop),e.desktopAuto!==void 0&&(t.desktopAutoRelease=e.desktopAuto),e.desktopAi!==void 0){if(e.desktopAi===!0&&e.desktop!==!0)throw new Error("--desktop-ai requires --desktop to be enabled.");t.desktopAi=e.desktopAi}if(e.ai!==void 0&&(t.ai=e.ai),e.rag!==void 0&&(t.rag=e.rag),e.companion!==void 0&&(t.companion=e.companion),e.mcpServer!==void 0&&(t.mcpServer=e.mcpServer),e.aiByok!==void 0&&(t.aiByok=e.aiByok),Wt(t),e.revenueSharing!==void 0&&(t.revenueSharing=e.revenueSharing),e.credits!==void 0){if(e.credits===!0&&e.payment==="none")throw new Error("--credits requires a payment provider (got --payment none).");t.credits=e.credits}if(e.docker!==void 0&&(t.dockerServices=qt(e.docker,Ve,"docker service")),e.aiTools!==void 0&&(t.aiTools=qt(e.aiTools,Be,"AI tool")),e.socialProviders!==void 0&&(t.socialProviders=qt(e.socialProviders,Ke,"social provider")),e.currency!==void 0){if(!ce.includes(e.currency))throw new Error(`Invalid currency "${e.currency}". Valid values: ${ce.join(", ")}`);t.defaultCurrency=e.currency}if(e.deploy!==void 0){if(!le.includes(e.deploy))throw new Error(`Invalid deployment target "${e.deploy}". Valid values: ${le.join(", ")}`);t.deploymentTarget=e.deploy}if(e.database!==void 0){if(!pe.includes(e.database))throw new Error(`Invalid database provider "${e.database}". Valid values: ${pe.join(", ")}`);t.databaseProvider=e.database}if(e.cache!==void 0){if(!de.includes(e.cache))throw new Error(`Invalid cache provider "${e.cache}". Valid values: ${de.join(", ")}`);t.cacheProvider=e.cache}if(e.demo===!0&&(t.demo=!0),e.baseUrl!==void 0){let n=e.baseUrl.trim();if(n==="")throw new Error("--base-url cannot be empty. Provide an absolute URL like https://example.com.");let r;try{r=new URL(n)}catch{throw new Error(`Invalid --base-url "${e.baseUrl}". Must be an absolute URL like https://example.com.`)}if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`Invalid --base-url "${e.baseUrl}". Must use http or https.`);t.baseUrl=`${r.protocol}//${r.host}`}return t}var ue={projectName:"my-saas",frontend:"nextjs",architecture:"fullstack",paymentProvider:"stripe",emailProvider:"smtp",multiTenancy:!1,billingScope:"user",blog:!0,docs:!1,desktop:!1,desktopAutoRelease:!1,desktopAi:!1,ai:!1,rag:!1,companion:!1,mcpServer:!1,aiByok:!0,revenueSharing:!1,credits:!0,dockerServices:["postgres","redis","inngest"],aiTools:[],socialProviders:[],defaultCurrency:"USD",deploymentTarget:"node",databaseProvider:"postgres",cacheProvider:"redis"};function Yn(e){let t=e.projectName??ue.projectName,n=e.projectDir??`./${t}`,r=e.appName??Ge(t),i=e.deploymentTarget??ue.deploymentTarget,o=re[i]?.edgeRuntime??!1,a=e.databaseProvider??(o?"neon":ue.databaseProvider),s=e.cacheProvider??(o?"upstash":ue.cacheProvider),d=e.emailProvider??(o?"resend":ue.emailProvider),m=e.dockerServices??(o?ue.dockerServices.filter(f=>f!=="postgres"&&f!=="redis"):ue.dockerServices),p={...ue,...e,projectName:t,appName:r,projectDir:n,deploymentTarget:i,databaseProvider:a,cacheProvider:s,emailProvider:d,dockerServices:m};p.paymentProvider==="none"&&(p.credits=!1),p.multiTenancy||(p.billingScope="user"),p.ai||(p.aiByok=ue.aiByok),p.companion&&p.companionName===void 0&&(p.companionName=Ie(p.projectName));for(let f of ot){if(p.deploymentTarget!==f.target)continue;let S=p.databaseProvider===f.provider?"database":"cache";if(p.databaseProvider===f.provider||p.cacheProvider===f.provider)throw new Error(`Incompatible: --deploy ${f.target} + --${S} ${f.provider}. ${f.reason}`)}for(let f of at)if(p.architecture===f.architecture&&p.deploymentTarget===f.target)throw new Error(`Incompatible: --architecture ${f.architecture} + --deploy ${f.target}. ${f.reason}`);return p}function qt(e,t,n){if(e.trim()==="")return[];let r=e.split(",").map(o=>o.trim()).filter(Boolean),i=r.filter(o=>!t.includes(o));if(i.length>0)throw new Error(`Invalid ${n}(s): ${i.join(", ")}. Valid values: ${t.join(", ")}`);return r}function E(e){g.isCancel(e)&&(g.cancel("Setup cancelled."),process.exit(0))}function Xt(e){let t=[];e.databaseProvider==="neon"&&t.push({key:"DATABASE_URL",message:"Neon connection string (optional):",placeholder:"postgres://...",secret:!0}),e.databaseProvider==="supabase"&&t.push({key:"DATABASE_URL",message:"Supabase connection string (optional):",placeholder:"postgres://...",secret:!0}),e.cacheProvider==="upstash"&&(t.push({key:"UPSTASH_REDIS_REST_URL",message:"Upstash REST URL (optional):",placeholder:"https://...",secret:!1}),t.push({key:"UPSTASH_REDIS_REST_TOKEN",message:"Upstash REST token (optional):",secret:!0})),e.paymentProvider==="stripe"&&(t.push({key:"STRIPE_SECRET_KEY",message:"Stripe secret key (optional):",placeholder:"sk_test_...",secret:!0}),t.push({key:"STRIPE_WEBHOOK_SECRET",message:"Stripe webhook secret (optional):",placeholder:"whsec_...",secret:!0})),e.paymentProvider==="polar"&&(t.push({key:"POLAR_ACCESS_TOKEN",message:"Polar access token (optional):",secret:!0}),t.push({key:"POLAR_WEBHOOK_SECRET",message:"Polar webhook secret (optional):",secret:!0})),e.emailProvider==="resend"&&t.push({key:"RESEND_API_KEY",message:"Resend API key (optional):",placeholder:"re_...",secret:!0}),e.emailProvider==="ses"&&(t.push({key:"AMAZON_SES_REGION",message:"Amazon SES region (optional):",placeholder:"us-east-1",secret:!1}),t.push({key:"AMAZON_SES_KEY",message:"Amazon SES access key (optional):",secret:!0}),t.push({key:"AMAZON_SES_SECRET",message:"Amazon SES secret (optional):",secret:!0}));for(let n of e.socialProviders){let r=se[n];for(let i of r.envVars)t.push({key:i.name,message:`${i.name} (${r.label}, optional):`,secret:i.secret})}return e.demo&&t.push({key:"TURNSTILE_SECRET_KEY",message:"Cloudflare Turnstile secret key (optional):",secret:!0}),t}async function Jn(e,t){let n=!1;e&&Wt(e),g.log.info(h.bold("Project"));let r=e?.projectName??await(async()=>{n=!0;let c=await g.text({message:"Project name:",placeholder:"my-saas",validate:u=>{if(!u?.trim())return"Project name is required.";if(!At(u))return"Use lowercase letters, numbers, and hyphens only. Must start with a letter."}});return E(c),c})(),i=e?.appName??await(async()=>{n=!0;let c=await g.text({message:"App name:",initialValue:Ge(r),validate:u=>{if(!u?.trim())return"App name is required."}});return E(c),c})(),o=e?.projectDir??await(async()=>{n=!0;let c=await g.text({message:"Project location:",initialValue:`./${r}`});return E(c),c==="."?process.cwd():c})(),a=e?.frontend??await(async()=>{n=!0;let c=Object.keys(nt),u=await g.select({message:"Frontend framework:",options:c.map(k=>({value:k,label:nt[k].label,hint:nt[k].hint}))});return E(u),u})();g.log.info(h.bold("Infrastructure"));let s=e?.deploymentTarget??"node";if(e?.deploymentTarget===void 0){n=!0;let c=await g.select({message:"Deployment target:",options:le.map(u=>({value:u,label:re[u].label,hint:re[u].hint}))});E(c),s=c}let d=e?.architecture?at.find(c=>c.architecture===e.architecture&&c.target===s):void 0;if(d)throw new Error(`Incompatible: --architecture ${d.architecture} + --deploy ${d.target}. ${d.reason}`);let m=new Set(at.filter(c=>c.target===s).map(c=>c.architecture)),p=je.filter(c=>!m.has(c)),f=e?.architecture??await(async()=>{if(p.length===1){let u=p[0];return g.log.info(`Auto-selected ${rt[u].label} architecture (only compatible option for ${re[s].label}).`),u}n=!0;let c=await g.select({message:"Architecture:",options:p.map(u=>({value:u,label:rt[u].label,hint:rt[u].hint}))});return E(c),c})(),S=e?.databaseProvider??await(async()=>{n=!0;let c=pe.filter(k=>!ot.some(G=>G.target===s&&G.provider===k));if(c.length===1){let k=c[0];return g.log.info(`Auto-selected ${J[k].label} (only compatible option for ${re[s].label}).`),k}let u=await g.select({message:"Database provider:",options:c.map(k=>({value:k,label:J[k].label,hint:J[k].hint}))});return E(u),u})(),b=e?.cacheProvider??await(async()=>{n=!0;let c=de.filter(k=>!ot.some(G=>G.target===s&&G.provider===k));if(c.length===1){let k=c[0];return g.log.info(`Auto-selected ${ie[k].label} (only compatible option for ${re[s].label}).`),k}let u=await g.select({message:"Cache provider:",options:c.map(k=>({value:k,label:ie[k].label,hint:ie[k].hint}))});return E(u),u})();if(re[s]?.edgeRuntime){let c=Vn.map(u=>` - ${u}`).join(`
3
+ `);g.note(c,"Unavailable on edge runtime")}g.log.info(h.bold("Features"));let A=e?.paymentProvider??await(async()=>{n=!0;let c=await g.select({message:"Payment provider:",options:Ue.map(u=>({value:u,label:bt[u].label,hint:bt[u].hint}))});return E(c),c})(),W=e?.defaultCurrency??await(async()=>{if(A==="none")return"USD";n=!0;let c=await g.select({message:"Default currency:",options:ce.map(u=>({value:u,label:u,hint:Ee[u].name}))});return E(c),c})(),V=e?.emailProvider??await(async()=>{n=!0;let c=await g.select({message:"Email provider:",options:Me.map(u=>({value:u,label:kt[u].label,hint:kt[u].hint}))});return E(c),c})(),R=e?.multiTenancy??await(async()=>{n=!0;let c=await g.confirm({message:"Enable multi-tenancy (organizations)?",initialValue:!1});return E(c),c})(),te=R?e?.billingScope??"user":"user";if(R&&e?.billingScope===void 0){n=!0;let c=await g.select({message:"Billing scope:",options:Fe.map(u=>({value:u,label:wt[u].label,hint:wt[u].hint}))});E(c),te=c}let B=e?.blog??await(async()=>{n=!0;let c=await g.confirm({message:"Enable blog?",initialValue:!0});return E(c),c})(),v=e?.docs??await(async()=>{n=!0;let c=await g.confirm({message:"Include docs app? (self-hosted Fumadocs documentation site)",initialValue:!1});return E(c),c})(),P=t?.desktopAllowed!==!1,O=e?.desktop??(P?await(async()=>{n=!0;let c=await g.confirm({message:"Include the desktop app? (apps/tauri - cross-platform, built with Tauri, device-auth)",initialValue:!1});return E(c),c})():(g.log.info(h.dim("Desktop app: available on the Pro plan and up - skipped.")),!1)),Y=O?e?.desktopAutoRelease??await(async()=>{n=!0;let c=await g.select({message:"Desktop release trigger:",options:[{value:!1,label:"Manual only",hint:"run from the Actions tab (saves CI minutes)"},{value:!0,label:"Automatic",hint:"release on every CI success on main"}],initialValue:!1});return E(c),c})():!1,T=e?.ai??await(async()=>{n=!0;let c=await g.confirm({message:"Add AI features? (chat, models, schedules, integrations - and unlocks the companion + MCP server)",initialValue:!1});return E(c),c})(),w=T?e?.rag??await(async()=>{n=!0;let c=await g.confirm({message:"Add a server-side knowledge base (keyword search over your knowledge/ docs)?",initialValue:!1});return E(c),c})():!1,ne=T?e?.companion??await(async()=>{n=!0;let c=await g.confirm({message:"Add the companion daemon? A small program your users install on their own machine or VPS to run their Claude Code / Codex / OpenCode subscription for this app 24/7 - the AI runs on their hardware, not yours.",initialValue:!1});return E(c),c})():!1,Cn=ne?e?.companionName??await(async()=>{n=!0;let c=await g.text({message:"Companion name (what your users install):",initialValue:Ie(r),validate:u=>{if(!u?.trim())return"Companion name is required."}});return E(c),c})():void 0,Dn=T?e?.mcpServer??await(async()=>{n=!0;let c=await g.confirm({message:"Add the outward MCP server? Lets external agents (Claude Code, Codex, Hermes, OpenClaw) control the app on a user's behalf over an authenticated MCP endpoint.",initialValue:!1});return E(c),c})():!1,Nn=T?e?.aiByok??await(async()=>{n=!0;let c=await g.confirm({message:"AI BYOK mode? (end-users bring their own provider key; no = operator-keyed, credit-metered)",initialValue:!0});return E(c),c})():!0,Ln=e?.revenueSharing??await(async()=>{n=!0;let c=await g.confirm({message:"Enable revenue sharing? (opt-in MRR leaderboard with dofollow backlinks)",initialValue:!1});return E(c),c})(),$n=A==="none"?!1:e?.credits??await(async()=>{n=!0;let c=await g.confirm({message:"Enable credits? (metered usage on top of subscription plans)",initialValue:!0});return E(c),c})(),ht=e?.socialProviders??await(async()=>{n=!0;let c=Ke.map(k=>({value:k,label:se[k].label,hint:`requires ${se[k].envVars.map(G=>G.name).join(" / ")}`})),u=await g.multiselect({message:"Which social login providers should the sign-in screen show?",options:c,initialValues:[],required:!1});return E(u),u})();g.log.info(h.bold("Tooling"));let Ht=e?.dockerServices??await(async()=>{n=!0;let c=[...Ve].filter(H=>H!=="mailpit");V==="smtp"&&c.push("mailpit");let u=c.map(H=>({value:H,label:$e[H].label,hint:$e[H].hint})),k=u.map(H=>H.value).filter(H=>!(H==="postgres"&&(S==="neon"||S==="supabase")||H==="redis"&&b==="upstash")),G=await g.multiselect({message:"Which services should we set up in Docker for you?",options:u,initialValues:k,required:!1});return E(G),G})(),zt=e?.aiTools??await(async()=>{n=!0;let c=Be.map(k=>({value:k,label:it[k].label})),u=await g.multiselect({message:"Which AI coding tools do you use?",options:c,initialValues:[],required:!1});return E(u),u})(),Yt=e?.demo,yt=Xt({databaseProvider:S,cacheProvider:b,paymentProvider:A,emailProvider:V,socialProviders:ht,demo:Yt}),tt={};if(yt.length>0&&n){g.log.info(h.bold("Credentials")+h.dim(" all optional - press Enter to skip, fill in .env later"));for(let c of yt)if(n=!0,c.secret){let u=await g.password({message:c.message,mask:"*"});E(u),typeof u=="string"&&u.trim()&&(tt[c.key]=u.trim())}else{let u=await g.text({message:c.message,placeholder:c.placeholder});E(u),typeof u=="string"&&u.trim()&&(tt[c.key]=u.trim())}}if(n){let c=[` Name: ${h.cyan(r)}`,` App name: ${h.cyan(i)}`,` Location: ${h.cyan(o)}`,` Frontend: ${h.cyan(nt[a].label)}`,` Architecture: ${h.cyan(rt[f].label)}`].join(`
4
+ `),u=[` Deploy target: ${h.cyan(re[s]?.label??"Node.js / Docker")}`,` Database: ${h.cyan(J[S].label)}`,` Cache: ${h.cyan(ie[b].label)}`,Ht.length>0?` Docker: ${h.cyan(Ht.map(Se=>$e[Se].label).join(", "))}`:` Docker: ${h.dim("none")}`].filter(Boolean).join(`
5
+ `),k=[A!=="none"?` Payment: ${h.cyan(bt[A].label)} (${W})`:` Payment: ${h.dim("none")}`,` Credits: ${$n?h.cyan("Yes"):h.dim("No")}`,` AI features: ${T?h.cyan("Yes"):h.dim("No")}`,...T?[` AI mode: ${h.cyan(Nn?"BYOK":"Operator-keyed (credits)")}`,` RAG knowledge: ${w?h.cyan("Yes"):h.dim("No")}`,` Companion: ${ne?h.cyan("Yes"):h.dim("No")}`,` MCP server: ${Dn?h.cyan("Yes"):h.dim("No")}`]:[],` Email: ${h.cyan(kt[V].label)}`,` Multi-tenancy: ${R?h.cyan("Yes")+` (billing: ${wt[te].label})`:h.dim("No")}`,` Blog: ${B?h.cyan("Yes"):h.dim("No")}`,` Docs app: ${v?h.cyan("Yes"):h.dim("No")}`,` Desktop app: ${O?h.cyan("Yes"):h.dim("No")}`,...O?[` Releases: ${h.cyan(Y?"Automatic on CI":"Manual only")}`]:[],` Rev. sharing: ${Ln?h.cyan("Yes"):h.dim("No")}`,ht.length>0?` Social login: ${h.cyan(ht.map(Se=>se[Se].label).join(", "))}`:` Social login: ${h.dim("none")}`,zt.length>0?` AI tools: ${h.cyan(zt.map(Se=>it[Se].label).join(", "))}`:` AI tools: ${h.dim("none")}`].join(`
6
+ `),G=[h.bold("Project"),c,"",h.bold("Infrastructure"),u,"",h.bold("Features"),k];if(yt.length>0){let Se=yt.map(jn=>{let Gi=tt[jn.key]?h.green("provided"):h.dim("skipped");return` ${jn.key}: ${Gi}`}).join(`
7
+ `);G.push("",h.bold("Credentials"),Se)}g.note(G.join(`
8
+ `),"Summary");let H=await g.confirm({message:"Proceed with these settings?"});(g.isCancel(H)||!H)&&(g.cancel("Setup cancelled."),process.exit(0))}return{projectName:r,appName:i,projectDir:o,frontend:a,architecture:f,deploymentTarget:s,databaseProvider:S,cacheProvider:b,paymentProvider:A,emailProvider:V,multiTenancy:R,billingScope:te,blog:B,docs:v,desktop:O,desktopAutoRelease:Y,desktopAi:O?e?.desktopAi??!1:!1,ai:T,rag:w,companion:ne,...Cn!==void 0?{companionName:Cn}:{},mcpServer:Dn,aiByok:Nn,revenueSharing:Ln,credits:$n,dockerServices:Ht,aiTools:zt,socialProviders:ht,defaultCurrency:W,...Object.keys(tt).length>0?{credentials:tt}:{},...e?.baseUrl!==void 0?{baseUrl:e.baseUrl}:{},...Yt!==void 0?{demo:Yt}:{}}}import{createReadStream as no}from"fs";import{mkdir as ro}from"fs/promises";import{Readable as io}from"stream";import{pipeline as nr}from"stream/promises";import{extract as oo}from"tar";import{join as Pe}from"path";import{homedir as zi}from"os";var st=process.env.GENERATESAAS_API_URL??"https://cli.generatesaas.com",z=".generatesaas",ge=Pe(z,"manifest.json"),qn=Pe(z,"hashes.json"),It=Pe(z,"template-hashes.json"),Pt=Pe(z,"template"),Wn=Pe(z,"staging"),Xn=Pe(z,"staging.json"),me=Pe(zi(),".generatesaas");var M=class extends Error{constructor(n,r,i){super(r);this.status=n;this.body=i}status;body;name="ApiError"};function fe(e){return{apiKey:e,baseUrl:st}}async function he(e,t,n){let r=`${e.baseUrl}${t}`,i=await fetch(r,{...n,headers:{...n?.headers,Authorization:`Bearer ${e.apiKey}`,"User-Agent":"generatesaas-cli"}});if(!i.ok){let o,a;try{a=await i.json(),o=a.error??`API ${i.status}: ${t}`}catch{o=`API ${i.status}: ${t}`}throw new M(i.status,o,a)}return i}import{existsSync as Yi,readFileSync as Ji,writeFileSync as qi,mkdirSync as Wi}from"fs";import{dirname as Xi}from"path";import*as ye from"@clack/prompts";function ct(){if(!Yi(me))return null;try{let e=JSON.parse(Ji(me,"utf-8"));return e.apiKey?e.apiKey:(e.token&&!e.apiKey&&ye.log.warning(`Found old GitHub token in ${me}. Run 'generatesaas init' to set up your API key.`),null)}catch{return null}}function Te(e){Wi(Xi(me),{recursive:!0}),qi(me,JSON.stringify({apiKey:e},null," ")+`
9
+ `,{mode:384})}async function He(e){if(e?.apiKey)return e.apiKey;let t=process.env.GENERATESAAS_API_KEY;if(t)return t;let n=ct();if(n)return n;if(!e?.prompt)throw new Error("API key not found. Set GENERATESAAS_API_KEY or run 'generatesaas init' to configure.");return lt()}async function lt(){let e=await ye.text({message:"Enter your GenerateSaaS API key:",placeholder:"gs_live_...",validate:t=>{if(!t?.trim())return"API key is required."}});return ye.isCancel(e)&&(ye.cancel("Setup cancelled."),process.exit(0)),e.trim()}async function ve(e){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{latest:"0.0.0-ci",versions:[{version:"0.0.0-ci",date:new Date().toISOString(),breaking:!1}],entitlements:null}:await(await he(e,"/versions")).json()}async function Zt(e,t){try{return await(await he(e,`/changelog/${encodeURIComponent(t)}`)).text()}catch(n){if(n instanceof M&&n.status===404)return null;throw n}}async function Zn(e,t){return await(await he(e,`/skill/${encodeURIComponent(t)}`)).json()}function Tt(e){if(!(e instanceof M)||e.status!==403)return null;let t=e.body;return!t||t.code!=="update_window_expired"?null:{message:e.message,lastAllowedVersion:t.lastAllowedVersion??null}}function Qn(e){return{frontend:e.frontend,architecture:e.architecture,deployTarget:e.deploymentTarget,database:e.databaseProvider,cache:e.cacheProvider,payment:e.paymentProvider,email:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,credits:e.credits,revenueSharing:e.revenueSharing,socialProviders:e.socialProviders,aiTools:e.aiTools,currency:e.defaultCurrency}}async function Qt(e,t){return process.env.GENERATESAAS_OFFLINE_LICENSE==="1"?{token:"offline-test-token",licenseId:"offline-test-license-id",installId:t.installId}:await(await he(e,"/license/sign",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function er(e,t){return await(await he(e,"/license/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json()}async function en(e,t){let n=await fetch(`${e}/license/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)});if(!n.ok)throw new Error(`Verification service returned ${n.status}`);return await n.json()}async function tr(e,t,n){let r=await fetch(`${e}/license/inspect`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${t}`},body:JSON.stringify(n)});if(!r.ok){let i=await r.json().catch(()=>null);throw new Error(i?.error??`Inspect endpoint returned ${r.status}`)}return await r.json()}var tn=new Set([".git","node_modules",".pnpm-store",".env",".env.test",".turbo",".nuxt",".output",".data","dist",".next",".svelte-kit",".wrangler",".devcontainer","playwright-report","test-results"]),nn=new Set(["pnpm-lock.yaml"]);function ze(e){if(rn(e))return!0;for(let t of e.split("/"))if(nn.has(t))return!0;return!1}var Zi=new Set(["data","mksaas","references","scripts",".cursor",".agents",".codex",".generatesaas",".vscode",".mcp.json","README.md","TODO.md","OVERVIEW.md"]),Qi=["scripts/knowledge-corpus.ts","scripts/knowledge-corpus.test.ts","scripts/knowledge-lint.ts","scripts/knowledge-build.ts","scripts/dev-ai-setup.ts","scripts/docs-lint.ts"],eo=["scripts/companion-export/"],to=["docs/superpowers","packages/cli","packages/cli-api","docs/opencompanion","infra/docker-compose.yml",".claude/commands",".claude/skills/web-next-port",".claude/skills/web-next-port-workspace",".claude/settings.local.json",".claude/worktrees"];function rn(e){let t=e.split("/");for(let n of t)if(tn.has(n))return!0;if(Qi.includes(e))return!1;for(let n of eo)if(e.startsWith(n)||`${e}/`===n)return!1;if(Zi.has(t[0]))return!0;for(let n of to)if(e===n||e.startsWith(n+"/"))return!0;return!1}async function Rt(e,t,n){await ro(n,{recursive:!0});let r=process.env.GENERATESAAS_TEMPLATE_TARBALL;if(r){await nr(no(r),rr(n));return}let i=await he(e,`/template/${encodeURIComponent(t)}`);if(!i.body)throw new Error("Empty response body");let o=io.fromWeb(i.body);await nr(o,rr(n))}function rr(e){return oo({cwd:e,strip:1,filter:t=>{let n=t.replace(/^[^/]+\//,"");return n?!rn(n):!0},sync:!1})}import{access as ao,readdir as so,readFile as _t,rm as on,writeFile as Ot}from"fs/promises";import{join as be}from"path";var co=["apps/web-nuxt/public/images/blog","apps/web-next/public/images/blog","packages/content/en/blog","packages/content/ro/blog"];async function ar(e){await Promise.all(co.map(t=>on(be(e,t),{recursive:!0,force:!0})))}var lo="packages/config/src/blog.ts";async function sr(e){let t=be(e,lo),n=await _t(t,"utf-8"),r=ir(ir(n,"blogCategories",t),"blogAuthors",t);await Ot(t,r)}function ir(e,t,n){let r=new RegExp(`(export const ${t}\\b[^=]*=\\s*)\\[[\\s\\S]*?\\];`);if(!r.test(e))throw new Error(`emptyBlogConfig: could not find the \`export const ${t} = [...]\` declaration in ${n}. The boilerplate blog config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);return e.replace(r,"$1[];")}async function cr(e){let t=be(e,"packages/i18n/translations"),n;try{n=await so(t)}catch{return}for(let r of n){let i=be(t,r,"web.json"),o;try{o=await _t(i,"utf-8")}catch{continue}let a=JSON.parse(o);!a.blog||a.blog.categories===void 0||(a.blog.categories={},await Ot(i,JSON.stringify(a,null," ")+`
10
+ `))}}var po="packages/config/src/ai/tasks.ts";async function lr(e){let t=be(e,po),n=await _t(t,"utf-8"),r=n.replace(/\n?[\t ]*\/\/ gsaas:demo-ai-task-start[\s\S]*?\/\/ gsaas:demo-ai-task-end/,"");if(r===n)throw new Error(`removeDemoAiTasks: could not find the \`gsaas:demo-ai-task\` markers in ${t}. The boilerplate AI tasks config may have been renamed or restructured; update the CLI strip in cleanup.ts.`);await Ot(t,r)}var or="apps/tauri/resources/ai-skills/example-skill";async function pr(e){let t=be(e,or);try{await ao(t)}catch{throw new Error(`removeExampleSkill: expected the demo skill at ${or}, but it was missing (boilerplate drift). The desktop AI layer is kept for this build, so the skill must exist.`)}await on(t,{recursive:!0})}async function dr(e,t){t.includes("claude-code")||await on(be(e,".claude"),{recursive:!0,force:!0})}async function ur(e,t){let n=be(e,".claude","settings.json"),r;try{r=await _t(n,"utf8")}catch{return}let i=JSON.parse(r);delete i.alwaysThinkingEnabled,delete i.enableAllProjectMcpServers,i.env&&(delete i.env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS,Object.keys(i.env).length===0&&delete i.env),i.permissions?.allow&&(i.permissions.allow=i.permissions.allow.filter(o=>uo(o,t))),await Ot(n,JSON.stringify(i,null," ")+`
11
+ `)}function uo(e,t){return!(e.startsWith("mcp__")||t!=="nuxt"&&e.includes("nuxt"))}import{join as mr}from"path";import{mkdir as mo,readdir as fo,rm as go,rmdir as ho,writeFile as yo}from"fs/promises";import{dirname as xt,join as vo,relative as bo,sep as ko}from"path";function Re(e){return e.split(ko).join("/")}async function Ct(e){await mo(e,{recursive:!0})}async function l(e,t){await Ct(xt(e)),await yo(e,t,"utf-8")}async function an(e,t){await go(e,{force:!0});let n=xt(e);for(;n!==t&&n!==xt(n);){try{await ho(n)}catch{return}n=xt(n)}}async function _e(e,t,n){let r=[],i=await fo(e,{withFileTypes:!0});for(let o of i){let a=vo(e,o.name),s=Re(bo(t,a));n(s)||(o.isDirectory()?r.push(...await _e(a,t,n)):o.isFile()&&r.push(a))}return r}var wo={postgres:"Postgres",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"},So={resend:"Resend",ses:"Amazon SES",smtp:"SMTP"},Eo={redis:"Redis",upstash:"Upstash Redis"},Ao={node:"Node.js / Docker",vercel:"Vercel"},Io={stripe:"Stripe",polar:"Polar"};function Po(e){let t=e.frontend==="nuxt",n=t?"Nuxt 4":"Next.js 16",r=t?"apps/web-nuxt":"apps/web-next",i=t?"`app/` pages + components + composables":"`app/` routes, `components/`, `lib/`",o=e.architecture==="fullstack",a=o?"(fullstack - Hono API mounted inside the app)":"(separate - standalone Hono backend)",s=o?`Mounted inside \`${r}\`. A standalone \`apps/backend\` is also kept (inert) so you can switch to separate later.`:"Runs from `apps/backend`; the frontend reaches it over HTTP.",d=Eo[e.cacheProvider],m=Ao[e.deploymentTarget],p=e.paymentProvider==="none"?"":`
12
+ - **Payments:** ${Io[e.paymentProvider]}`,f=e.desktop?", and the desktop app (built with Tauri) under `docs/desktop/`":"",S=e.companion?", and the OpenCompanion daemon under `docs/opencompanion/`":"",b=t?"`$t('key')` in templates (global helper); `useI18n()` from `vue-i18n` in `<script setup>` for `locale`/`setLocale`/`t()`.":"`useTranslations()` from `next-intl` in components; messages are loaded in `apps/web-next/i18n/request.ts`.",A=t?"**Navigation:** always use `localePath()` for paths (hardcoded paths break non-default locales); `await navigateTo()` in SSR.":"**Navigation:** `next/link` for links; `redirect()` from `next/navigation` for programmatic redirects in Server Components.";return`# AGENTS.md
13
13
 
14
14
  Guidelines for AI coding agents (Claude Code, Codex, Cursor, \u2026) in this project.
15
15
  Keep this file tight: add a rule only when it prevents a recurring mistake - too
@@ -37,10 +37,10 @@ flag, route, or translation is the most common and most costly mistake in this r
37
37
 
38
38
  - **Frontend:** ${n} ${a}
39
39
  - **API:** Hono, RPC-typed. ${s}
40
- - **Database:** Drizzle ORM + ${co[e.databaseProvider]}
40
+ - **Database:** Drizzle ORM + ${wo[e.databaseProvider]}
41
41
  - **Cache + jobs:** ${d} + Inngest
42
42
  - **Auth:** Better Auth${p}
43
- - **Email:** ${lo[e.emailProvider]}
43
+ - **Email:** ${So[e.emailProvider]}
44
44
  - **Deploy:** ${m}
45
45
 
46
46
  ## Where things live (extend these - don't reinvent)
@@ -52,7 +52,7 @@ flag, route, or translation is the most common and most costly mistake in this r
52
52
  - \`packages/runtime/src/env.ts\` - the validated (Zod) env schema. New env var \u2192 add it here **and** to \`.env.example\` (the committed reference); set the local value in \`.env\`.
53
53
  - \`packages/{payments,mail,sms,storage,notifications}\` - config-gated integrations. Every provider's files stay even when its feature is off, so flipping a flag is enough to enable it.
54
54
  - \`${r}\` - the ${n} app (${i}).
55
- - \`docs/${t?"nuxt":"next"}/\` - feature & architecture documentation for this stack (Markdown). Consult it before searching from scratch; it cites real config keys, package names, and file paths you can act on. The GenerateSaaS CLI lives under \`docs/cli/\`${f}${w}.
55
+ - \`docs/${t?"nuxt":"next"}/\` - feature & architecture documentation for this stack (Markdown). Consult it before searching from scratch; it cites real config keys, package names, and file paths you can act on. The GenerateSaaS CLI lives under \`docs/cli/\`${f}${S}.
56
56
 
57
57
  ## Knowledge
58
58
 
@@ -74,7 +74,7 @@ flag, route, or translation is the most common and most costly mistake in this r
74
74
  - **Hono routes:** keep the method chain (\`.get().post()\`) - RPC type inference depends on it. Validate with \`sValidator\` from \`@hono/standard-validator\`.
75
75
  - **Feature flags:** respect \`config.*\` - hide/skip a feature when its flag is off (the files stay so you can flip it later).
76
76
  - **i18n:** strings live in \`packages/i18n/translations/{locale}/{scope}.json\`; edit \`en/\` only, keep keys generic. ${b} A pre-commit hook runs \`pnpm translate\` (needs \`OPENROUTER_API_KEY\`) to sync other locales from \`en\`; without the key it skips.
77
- - ${S}
77
+ - ${A}
78
78
  - **Routes:** use \`config.routes.*\`, never hardcoded path strings.
79
79
  - **Secrets:** never send them to an external service; generate tokens/QR codes client-side.
80
80
 
@@ -85,8 +85,8 @@ In \`@repo/*\` backend packages prefer web-standard APIs: \`crypto.randomUUID()\
85
85
  ## This project
86
86
 
87
87
  Scaffolded from the GenerateSaaS boilerplate. To pull upstream boilerplate updates, ask your agent to **"update my GenerateSaaS project"**. To remove the license heartbeat + manifest: \`pnpm dlx generatesaas eject\`.
88
- `}async function or(e){await l(ir(e.projectDir,"AGENTS.md"),fo(e)),await l(ir(e.projectDir,"CLAUDE.md"),`@AGENTS.md
89
- `)}import{join as go}from"path";var ho={postgres:"Postgres (self-hosted)",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"};function yo(e){let t=e.appName.trim()||e.projectName,n=e.frontend==="nuxt",r=n?"Nuxt 4":"Next.js 16",i=n?"apps/web-nuxt":"apps/web-next",o=ho[e.databaseProvider],a=vt(e),s=e.architecture==="fullstack"?`${r} app at \`${i}/\` with the Hono API mounted inside it. A standalone \`apps/backend/\` is also included (inert in this fullstack setup) so you can split the API into a separate service later without re-scaffolding.`:`${r} app at \`${i}/\` and a separate Hono backend at \`apps/backend/\`.`,d=e.architecture==="fullstack"?`- App + API: http://localhost:3000
88
+ `}async function fr(e){await l(mr(e.projectDir,"AGENTS.md"),Po(e)),await l(mr(e.projectDir,"CLAUDE.md"),`@AGENTS.md
89
+ `)}import{join as To}from"path";var Ro={postgres:"Postgres (self-hosted)",neon:"Neon (managed Postgres)",supabase:"Supabase (managed Postgres)"};function _o(e){let t=e.appName.trim()||e.projectName,n=e.frontend==="nuxt",r=n?"Nuxt 4":"Next.js 16",i=n?"apps/web-nuxt":"apps/web-next",o=Ro[e.databaseProvider],a=St(e),s=e.architecture==="fullstack"?`${r} app at \`${i}/\` with the Hono API mounted inside it. A standalone \`apps/backend/\` is also included (inert in this fullstack setup) so you can split the API into a separate service later without re-scaffolding.`:`${r} app at \`${i}/\` and a separate Hono backend at \`apps/backend/\`.`,d=e.architecture==="fullstack"?`- App + API: http://localhost:3000
90
90
  - Inngest dev server: http://127.0.0.1:8288`:`- App: http://localhost:3000
91
91
  - API: http://localhost:3010
92
92
  - Inngest dev server: http://127.0.0.1:8288`,m=a?`pnpm infra # optional: starts local Docker services (Postgres / Redis / Inngest / Mailpit)
@@ -149,12 +149,14 @@ pnpm dlx generatesaas eject
149
149
  ## Updates
150
150
 
151
151
  ${f}
152
- `}async function ar(e){await l(go(e.projectDir,"README.md"),yo(e))}import{readFile as vo}from"fs/promises";import{join as _t}from"path";var on="https://generatesaas.com";async function bo(e,t){let n=_t(e,"apps/tauri/src-tauri/tauri.conf.json"),r=JSON.parse(await vo(n,"utf8")),i=r.app?.security?.csp;if(typeof i!="string"||!i.includes(on))throw new Error(`Cannot neutralize ${n}: the upstream origin "${on}" was not found in app.security.csp. The boilerplate config may have drifted.`);if(r.app.security.csp=i.split(on).join(t),!r.bundle?.macOS||!("signingIdentity"in r.bundle.macOS))throw new Error(`Cannot neutralize ${n}: expected bundle.macOS.signingIdentity to remove. The boilerplate config may have drifted.`);delete r.bundle.macOS.signingIdentity,await l(n,JSON.stringify(r,null,2)+`
153
- `)}function ko(e){let t=e.split(".");return t.length>=3?t.slice(1).join("."):e}function wo(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")||"app"}function So(e,t){let n=wo(e);return{appId:`${t.split(".").reverse().join(".")}.${n.replace(/-/g,"")}`,productName:e,protocol:n}}async function sr(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),n=e.paymentProvider!=="none",r=e.baseUrl??"http://localhost:3000",i=e.baseUrl?new URL(e.baseUrl).hostname:"example.com",o=ko(i),a=e.demo?"false":"true",s=e.demo?`
152
+ `}async function gr(e){await l(To(e.projectDir,"README.md"),_o(e))}import{readFile as yr}from"fs/promises";import{join as pt}from"path";import{join as Oo}from"path";function sn(e,t){let n=Et(e,"companion"),r=t?new URL(t).hostname.split(".").reverse().join("."):"com",i=n.toUpperCase().replace(/-/g,"_");return{name:e,binary:n,scope:`@${n}`,serviceLabel:`${r}.${n}`,appDirName:n,envPrefix:/^[0-9]/.test(i)?`_${i}`:i,docsUrl:"",repoUrl:"",installBase:""}}async function hr(e){if(!e.companion||e.demo)return;if(!e.companionName)throw new Error("generateCompanionBrand: companion is enabled but options.companionName is missing.");let t=sn(e.companionName,e.baseUrl);await l(Oo(e.projectDir,"apps/companion/brand.json"),JSON.stringify(t,null,2)+`
153
+ `)}var cn="https://generatesaas.com";async function xo(e,t){let n=pt(e,"apps/tauri/src-tauri/tauri.conf.json"),r=JSON.parse(await yr(n,"utf8")),i=r.app?.security?.csp;if(typeof i!="string"||!i.includes(cn))throw new Error(`Cannot neutralize ${n}: the upstream origin "${cn}" was not found in app.security.csp. The boilerplate config may have drifted.`);if(r.app.security.csp=i.split(cn).join(t),!r.bundle?.macOS||!("signingIdentity"in r.bundle.macOS))throw new Error(`Cannot neutralize ${n}: expected bundle.macOS.signingIdentity to remove. The boilerplate config may have drifted.`);delete r.bundle.macOS.signingIdentity,await l(n,JSON.stringify(r,null,2)+`
154
+ `)}function Co(e){let t=e.split(".");return t.length>=3?t.slice(1).join("."):e}function Do(e,t){let n=Et(e,"app");return{appId:`${t.split(".").reverse().join(".")}.${n.replace(/-/g,"")}`,productName:e,protocol:n}}async function No(e){if(!e.companion)return'{ enabled: false, clientId: "companion" }';let t;if(e.demo)t=JSON.parse(await yr(pt(e.projectDir,"apps/companion/brand.json"),"utf8"));else{if(!e.companionName)throw new Error("generateConfig: companion is enabled but options.companionName is missing.");t=sn(e.companionName,e.baseUrl)}let n={name:t.name,binary:t.binary,envPrefix:t.envPrefix,repoUrl:t.repoUrl,installBase:t.installBase};return["{"," enabled: true,",' clientId: "companion",'," daemon: {",` name: ${JSON.stringify(n.name)},`,` binary: ${JSON.stringify(n.binary)},`,` envPrefix: ${JSON.stringify(n.envPrefix)},`,` repoUrl: ${JSON.stringify(n.repoUrl)},`,` installBase: ${JSON.stringify(n.installBase)}`," }"," }"].join(`
155
+ `)}async function vr(e){let t=e.appName.replace(/\\/g,"\\\\").replace(/"/g,'\\"'),n=e.paymentProvider!=="none",r=e.baseUrl??"http://localhost:3000",i=e.baseUrl?new URL(e.baseUrl).hostname:"example.com",o=Co(i),a=e.demo?"false":"true",s=e.demo?`
154
156
  support: {
155
157
  enableInDev: true,
156
158
  crisp: { websiteId: "7e221cec-ed61-46b7-b1b4-8cbc16557cca" }
157
- },`:"",d=e.frontend==="nextjs"&&e.architecture==="fullstack"?"false":"true",m=So(t,o),p=`{ enabled: ${e.rag} }`,f=e.companion?'{ enabled: true, clientId: "companion" }':'{ enabled: false, clientId: "companion" }',w=`{ enabled: ${e.mcpServer} }`,b=`import type { AppConfig } from "@repo/config/types";
159
+ },`:"",d=e.frontend==="nextjs"&&e.architecture==="fullstack"?"false":"true",m=Do(t,o),p=`{ enabled: ${e.rag} }`,f=await No(e),S=`{ enabled: ${e.mcpServer} }`,b=`import type { AppConfig } from "@repo/config/types";
158
160
  import { desktopConfig } from "./desktop.mjs";
159
161
  import { tenancyConfig } from "./tenancy-flags.mjs";
160
162
 
@@ -261,7 +263,7 @@ export const config: AppConfig = {
261
263
  }`:`{
262
264
  base: "${e.defaultCurrency}",
263
265
  list: [
264
- { symbol: "${we[e.defaultCurrency].symbol}", name: "${we[e.defaultCurrency].name}", code: "${e.defaultCurrency}", place: "${we[e.defaultCurrency].place}", space: ${we[e.defaultCurrency].space} }
266
+ { symbol: "${Ee[e.defaultCurrency].symbol}", name: "${Ee[e.defaultCurrency].name}", code: "${e.defaultCurrency}", place: "${Ee[e.defaultCurrency].place}", space: ${Ee[e.defaultCurrency].space} }
265
267
  ],
266
268
  countryMap: {
267
269
  default: "${e.defaultCurrency}"
@@ -308,10 +310,10 @@ export const config: AppConfig = {
308
310
  desktop: desktopConfig,
309
311
  // Server-side keyword knowledge base over your knowledge/ docs. Off by default.
310
312
  rag: ${p},
311
- // Companion: the backend feature for the universal OpenCompanion daemon your users install to drive their subscription CLIs. Off by default.
313
+ // Companion: your vendored companion daemon (apps/companion) that your users install to run their own subscription CLIs. Off by default.
312
314
  companion: ${f},
313
315
  // Outward MCP server exposing the capability layer to external agents. Off by default.
314
- mcpServer: ${w},
316
+ mcpServer: ${S},
315
317
  seo: {
316
318
  description: "Production-ready SaaS application",
317
319
  foundingDate: "${new Date().getFullYear()}-01-01"
@@ -344,7 +346,7 @@ export * from "./pricing";
344
346
  export * from "./roles";
345
347
  export * from "./section-tabs";
346
348
  export * from "./tenancy";
347
- `,S=_t(e.projectDir,"packages/config/src/index.ts");await l(S,b),await l(_t(e.projectDir,"packages/config/src/desktop.mjs"),`// Plain-JS desktop app identity. NO env reads, so tooling that cannot import the
349
+ `,A=pt(e.projectDir,"packages/config/src/index.ts");await l(A,b),await l(pt(e.projectDir,"packages/config/src/desktop.mjs"),`// Plain-JS desktop app identity. NO env reads, so tooling that cannot import the
348
350
  // TypeScript config index reads it directly: the Tauri renderer, the apps/tauri
349
351
  // sidecar engine, the Tauri identity sync (apps/tauri/scripts/sync-identity.mjs)
350
352
  // and the release scripts. Edit these values once to rebrand - they are the same
@@ -386,7 +388,7 @@ export const desktopConfig = {
386
388
  maxChatsPerAgent: 20
387
389
  }
388
390
  };
389
- `),await l(_t(e.projectDir,"packages/config/src/tenancy-flags.mjs"),`// Plain-JS tenancy flags. NO env reads, so tooling that cannot import the
391
+ `),await l(pt(e.projectDir,"packages/config/src/tenancy-flags.mjs"),`// Plain-JS tenancy flags. NO env reads, so tooling that cannot import the
390
392
  // TypeScript config index reads it directly (the Tauri renderer). Mirrors the
391
393
  // desktop.mjs pattern. The config index re-exports this as config.tenancy.
392
394
 
@@ -395,8 +397,8 @@ export const tenancyConfig = ${e.multiTenancy?`{
395
397
  organizationLimit: 5,
396
398
  billingScope: "${e.billingScope}"
397
399
  }`:"{ multiTenant: false }"};
398
- `),e.desktop&&await bo(e.projectDir,new URL(r).origin)}import{join as Eo}from"path";function Ao(e){return e==="stripe"?' stripePriceId: "",':' polarProductId: "",'}function an(e){let t=[];return e.withCredits&&(t.push(` credits: ${e.credits},`),t.push(" creditInterval: 30,")),t.push(` apiRateLimit: { maxRequests: ${e.rateLimit} }`),t.join(`
399
- `)}async function cr(e){let t=Eo(e.projectDir,"packages/config/src/pricing.ts"),n=e.defaultCurrency;if(e.paymentProvider==="none"){let f=`import type { PricingConfig } from "@repo/config/types";
400
+ `),e.desktop&&await xo(e.projectDir,new URL(r).origin)}import{join as Lo}from"path";function $o(e){return e==="stripe"?' stripePriceId: "",':' polarProductId: "",'}function ln(e){let t=[];return e.withCredits&&(t.push(` credits: ${e.credits},`),t.push(" creditInterval: 30,")),t.push(` apiRateLimit: { maxRequests: ${e.rateLimit} }`),t.join(`
401
+ `)}async function br(e){let t=Lo(e.projectDir,"packages/config/src/pricing.ts"),n=e.defaultCurrency;if(e.paymentProvider==="none"){let f=`import type { PricingConfig } from "@repo/config/types";
400
402
 
401
403
  export const pricingConfig: PricingConfig = {
402
404
  defaultPlan: "free",
@@ -425,7 +427,7 @@ export const pricingConfig: PricingConfig = {
425
427
  credits: { enabled: false },
426
428
  products: { enabled: false, items: [] }
427
429
  };
428
- `;await l(t,f);return}let r=e.paymentProvider,i=Ao(r),o=e.credits,a=an({credits:5,rateLimit:100,withCredits:o}),s=an({credits:10,rateLimit:1e3,withCredits:o}),d=an({credits:50,rateLimit:5e3,withCredits:o}),p=`import type { PricingConfig } from "@repo/config/types";
430
+ `;await l(t,f);return}let r=e.paymentProvider,i=$o(r),o=e.credits,a=ln({credits:5,rateLimit:100,withCredits:o}),s=ln({credits:10,rateLimit:1e3,withCredits:o}),d=ln({credits:50,rateLimit:5e3,withCredits:o}),p=`import type { PricingConfig } from "@repo/config/types";
429
431
 
430
432
  export const pricingConfig: PricingConfig = {
431
433
  defaultPlan: "free",
@@ -515,11 +517,11 @@ ${o?" credits: { enabled: true }":" credits: { enabled: false }"},
515
517
  items: []
516
518
  }
517
519
  };
518
- `;await l(t,p)}var Io={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"},{key:"SMTP_USER"},{key:"SMTP_PASSWORD"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]};function Po(e){let t=ae[e];return t.envVars.map((n,r)=>({key:n.name,...r===0?{comment:`# TODO: Add your ${t.label} OAuth credentials`}:{}}))}var To={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function Fe(e,t){return t?e.map(n=>{let r=t[n.key];return r?{...n,defaultValue:r,comment:void 0}:n}):e}function Ke(e,t){for(let n of e)n.comment&&t.push(n.comment),n.defaultValue!==void 0?t.push(`${n.key}=${n.defaultValue}`):t.push(`#${n.key}=`)}function sn(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function pr(e){return e.architecture==="fullstack"?{apiUrl:"http://localhost:3000/api",baseUrl:"http://localhost:3000"}:{apiUrl:"http://localhost:3010",baseUrl:"http://localhost:3000"}}function Ro(e){let{architecture:t,deploymentTarget:n}=e;return t==="fullstack"?n==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://your-app.vercel.app"}:n==="node"?{frontend:"https://your-app.example.com",backend:"https://your-app.example.com"}:null:{frontend:"https://your-app.example.com",backend:"https://your-app.example.com/api"}}function Ot(e,t,n,r){e.push(r==="example"?`${t}=`:`${t}=${n}`)}function lr(e,t){let n=t==="example"?void 0:e.credentials,{apiUrl:r,baseUrl:i}=pr(e),o=[];e.architecture==="separate"?o.push("# API Configuration","# Standalone backend's own URL (the frontend reaches it via the public var above).",`API_URL=${r}`,`BASE_URL=${i}`):o.push("# App","# (API_URL is derived from the frontend's *_PUBLIC_API_URL by the runtime env schema.)",`BASE_URL=${i}`),o.push("","# Database"),Ke(Fe(Y[e.databaseProvider].envVars,n),o),o.push("","# Cache"),Ke(Fe(ne[e.cacheProvider].envVars,n),o),o.push("","# Authentication"),t==="example"&&o.push("# Generate a strong secret, e.g. `openssl rand -hex 32`"),Ot(o,"BETTER_AUTH_SECRET",crypto.randomUUID(),t),o.push("","# Content API (random secret; required when contentApi feature is enabled in @repo/config)"),Ot(o,"CONTENT_API_KEY",sn(32),t),o.push("","# Job Queue - Inngest","INNGEST_APP_ID=api"),Ot(o,"INNGEST_EVENT_KEY",sn(32),t),Ot(o,"INNGEST_SIGNING_KEY",sn(32),t),o.push("INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&(o.push("","# API Port (standalone backend)","API_PORT=3010"),o.push("","# CORS + cross-subdomain cookies (production only - leave unset for local dev)","# TRUSTED_ORIGINS=https://your-app.example.com","# AUTH_COOKIE_DOMAIN=.example.com"));let a=Io[e.emailProvider];if(a&&(o.push("","# Email"),Ke(Fe(a,n),o)),e.paymentProvider!=="none"){let s=To[e.paymentProvider];s&&(o.push("","# Payment"),Ke(Fe(s,n),o))}if(e.socialProviders.length>0){o.push("","# Social auth");for(let s of e.socialProviders)Ke(Fe(Po(s),n),o)}return e.demo&&(o.push("","# Captcha (Cloudflare Turnstile)"),Ke(Fe([{key:"TURNSTILE_SECRET_KEY",comment:"# TODO: Add your Cloudflare Turnstile secret key"}],n),o)),o.push("","# Translations - OpenRouter (optional)","# Set to auto-translate en/* into your other locales with `pnpm translate`.","# The pre-commit hook runs it on commit; without a key it skips and untranslated","# locales fall back to the default locale. Get a key: https://openrouter.ai/keys","#OPENROUTER_API_KEY="),o.push("","# AI base - provider API keys (optional)","# Enable config.ai in packages/config and set the key for your chosen provider.","# OPENROUTER_API_KEY above also works as an AI provider key.","#ANTHROPIC_API_KEY=","#OPENAI_API_KEY="),o.push(""),o.join(`
519
- `)}function _o(e){let{apiUrl:t}=pr(e),n=e.frontend==="nextjs"?"NEXT_PUBLIC_API_URL":"NUXT_PUBLIC_API_URL",r=["# API Configuration",`${n}=${t}`],i=Ro(e);return i&&e.architecture==="separate"&&r.push("","# Production (uncomment and replace with your deployed hostnames):",`# ${n}=${i.backend}`),r.push(""),r.join(`
520
- `)}async function dr(e){let t=_o(e);await l(`${e.projectDir}/.env`,t+`
521
- `+lr(e,"env")),await l(`${e.projectDir}/.env.example`,t+`
522
- `+lr(e,"example"))}import{join as Oo}from"path";async function ur(e){let t=[...e.dockerServices];if(Y[e.databaseProvider].managed&&(t=t.filter(o=>o!=="postgres")),ne[e.cacheProvider].managed&&(t=t.filter(o=>o!=="redis")),t.length===0)return!1;let n=[],r=[];t.includes("postgres")&&(n.push(` postgres:
520
+ `;await l(t,p)}var jo={smtp:[{key:"SMTP_HOST",defaultValue:"localhost"},{key:"SMTP_PORT",defaultValue:"1025"},{key:"SMTP_USER"},{key:"SMTP_PASSWORD"}],ses:[{key:"AMAZON_SES_REGION",comment:"# TODO: Configure Amazon SES credentials (e.g. us-east-1)"},{key:"AMAZON_SES_KEY"},{key:"AMAZON_SES_SECRET"}],resend:[{key:"RESEND_API_KEY",comment:"# TODO: Add your Resend API key"}]};function Uo(e){let t=se[e];return t.envVars.map((n,r)=>({key:n.name,...r===0?{comment:`# TODO: Add your ${t.label} OAuth credentials`}:{}}))}var Mo={stripe:[{key:"STRIPE_SECRET_KEY",comment:"# TODO: Add your Stripe keys"},{key:"STRIPE_WEBHOOK_SECRET"}],polar:[{key:"POLAR_ACCESS_TOKEN",comment:"# TODO: Add your Polar keys"},{key:"POLAR_WEBHOOK_SECRET"}]};function Ye(e,t){return t?e.map(n=>{let r=t[n.key];return r?{...n,defaultValue:r,comment:void 0}:n}):e}function Je(e,t){for(let n of e)n.comment&&t.push(n.comment),n.defaultValue!==void 0?t.push(`${n.key}=${n.defaultValue}`):t.push(`#${n.key}=`)}function pn(e){return Array.from(crypto.getRandomValues(new Uint8Array(e))).map(t=>t.toString(16).padStart(2,"0")).join("")}function wr(e){return e.architecture==="fullstack"?{apiUrl:"http://localhost:3000/api",baseUrl:"http://localhost:3000"}:{apiUrl:"http://localhost:3010",baseUrl:"http://localhost:3000"}}function Vo(e){let{architecture:t,deploymentTarget:n}=e;return t==="fullstack"?n==="vercel"?{frontend:"https://your-app.vercel.app",backend:"https://your-app.vercel.app"}:n==="node"?{frontend:"https://your-app.example.com",backend:"https://your-app.example.com"}:null:{frontend:"https://your-app.example.com",backend:"https://your-app.example.com/api"}}function Dt(e,t,n,r){e.push(r==="example"?`${t}=`:`${t}=${n}`)}function kr(e,t){let n=t==="example"?void 0:e.credentials,{apiUrl:r,baseUrl:i}=wr(e),o=[];e.architecture==="separate"?o.push("# API Configuration","# Standalone backend's own URL (the frontend reaches it via the public var above).",`API_URL=${r}`,`BASE_URL=${i}`):o.push("# App","# (API_URL is derived from the frontend's *_PUBLIC_API_URL by the runtime env schema.)",`BASE_URL=${i}`),o.push("","# Database"),Je(Ye(J[e.databaseProvider].envVars,n),o),o.push("","# Cache"),Je(Ye(ie[e.cacheProvider].envVars,n),o),o.push("","# Authentication"),t==="example"&&o.push("# Generate a strong secret, e.g. `openssl rand -hex 32`"),Dt(o,"BETTER_AUTH_SECRET",crypto.randomUUID(),t),o.push("","# Content API (random secret; required when contentApi feature is enabled in @repo/config)"),Dt(o,"CONTENT_API_KEY",pn(32),t),o.push("","# Job Queue - Inngest","INNGEST_APP_ID=api"),Dt(o,"INNGEST_EVENT_KEY",pn(32),t),Dt(o,"INNGEST_SIGNING_KEY",pn(32),t),o.push("INNGEST_BASE_URL=http://127.0.0.1:8288"),e.architecture==="separate"&&(o.push("","# API Port (standalone backend)","API_PORT=3010"),o.push("","# CORS + cross-subdomain cookies (production only - leave unset for local dev)","# TRUSTED_ORIGINS=https://your-app.example.com","# AUTH_COOKIE_DOMAIN=.example.com"));let a=jo[e.emailProvider];if(a&&(o.push("","# Email"),Je(Ye(a,n),o)),e.paymentProvider!=="none"){let s=Mo[e.paymentProvider];s&&(o.push("","# Payment"),Je(Ye(s,n),o))}if(e.socialProviders.length>0){o.push("","# Social auth");for(let s of e.socialProviders)Je(Ye(Uo(s),n),o)}return e.demo&&(o.push("","# Captcha (Cloudflare Turnstile)"),Je(Ye([{key:"TURNSTILE_SECRET_KEY",comment:"# TODO: Add your Cloudflare Turnstile secret key"}],n),o)),o.push("","# Translations - OpenRouter (optional)","# Set to auto-translate en/* into your other locales with `pnpm translate`.","# The pre-commit hook runs it on commit; without a key it skips and untranslated","# locales fall back to the default locale. Get a key: https://openrouter.ai/keys","#OPENROUTER_API_KEY="),o.push("","# AI base - provider API keys (optional)","# Enable config.ai in packages/config and set the key for your chosen provider.","# OPENROUTER_API_KEY above also works as an AI provider key.","#ANTHROPIC_API_KEY=","#OPENAI_API_KEY="),o.push(""),o.join(`
521
+ `)}function Bo(e){let{apiUrl:t}=wr(e),n=e.frontend==="nextjs"?"NEXT_PUBLIC_API_URL":"NUXT_PUBLIC_API_URL",r=["# API Configuration",`${n}=${t}`],i=Vo(e);return i&&e.architecture==="separate"&&r.push("","# Production (uncomment and replace with your deployed hostnames):",`# ${n}=${i.backend}`),r.push(""),r.join(`
522
+ `)}async function Sr(e){let t=Bo(e);await l(`${e.projectDir}/.env`,t+`
523
+ `+kr(e,"env")),await l(`${e.projectDir}/.env.example`,t+`
524
+ `+kr(e,"example"))}import{join as Fo}from"path";async function Er(e){let t=[...e.dockerServices];if(J[e.databaseProvider].managed&&(t=t.filter(o=>o!=="postgres")),ie[e.cacheProvider].managed&&(t=t.filter(o=>o!=="redis")),t.length===0)return!1;let n=[],r=[];t.includes("postgres")&&(n.push(` postgres:
523
525
  image: postgres:18-alpine
524
526
  ports:
525
527
  - "\${POSTGRES_PORT:-5432}:5432"
@@ -563,8 +565,8 @@ ${n.join(`
563
565
  volumes:
564
566
  ${r.join(`
565
567
  `)}
566
- `),await l(Oo(e.projectDir,"infra/docker-compose.yml"),i),!0}import{join as xo}from"path";function Co(e){let t=[];t.push({type:"node-terminal",request:"launch",name:"Dev",command:"pnpm dev",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let n=e.frontend==="nextjs"?"Next.js":"Nuxt";if(t.push({type:"node-terminal",request:"launch",name:n,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend==="nextjs"?"next":"nuxt"}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.docs&&t.push({type:"node-terminal",request:"launch",name:"Docs",command:"pnpm dev",cwd:"${workspaceFolder}/apps/docs",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.desktop){let r=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Desktop",command:"pnpm dev",cwd:"${workspaceFolder}/apps/tauri",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development",BASE_URL:"http://localhost:3000",PUBLIC_API_URL:r}})}if(t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Mail",command:"pnpm dev:mail",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.paymentProvider==="stripe"){let r=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${r}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Do(e){let t=e.frontend==="nextjs"?"Next.js":"Nuxt",n=[];return e.architecture==="separate"?n.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):n.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),n}async function mr(e){let t={version:"0.2.0",configurations:Co(e),compounds:Do(e)};await l(xo(e.projectDir,".vscode/launch.json"),JSON.stringify(t,null," ")+`
567
- `)}import{join as No}from"path";async function fr(e){if(e.architecture!=="separate")return;await l(No(e.projectDir,"apps/backend/src/index.ts"),`import { serve } from "@hono/node-server";
568
+ `),await l(Fo(e.projectDir,"infra/docker-compose.yml"),i),!0}import{join as Ko}from"path";function Go(e){let t=[];t.push({type:"node-terminal",request:"launch",name:"Dev",command:"pnpm dev",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.architecture==="separate"&&t.push({type:"node-terminal",request:"launch",name:"Backend",command:"pnpm dev",cwd:"${workspaceFolder}/apps/backend",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}});let n=e.frontend==="nextjs"?"Next.js":"Nuxt";if(t.push({type:"node-terminal",request:"launch",name:n,command:"pnpm dev",cwd:`\${workspaceFolder}/apps/web-${e.frontend==="nextjs"?"next":"nuxt"}`,skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.docs&&t.push({type:"node-terminal",request:"launch",name:"Docs",command:"pnpm dev",cwd:"${workspaceFolder}/apps/docs",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.desktop){let r=e.architecture==="separate"?"http://localhost:3010":"http://localhost:3000/api";t.push({type:"node-terminal",request:"launch",name:"Desktop",command:"pnpm dev",cwd:"${workspaceFolder}/apps/tauri",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development",BASE_URL:"http://localhost:3000",PUBLIC_API_URL:r}})}if(t.push({type:"node-terminal",request:"launch",name:"Inngest",command:"pnpm dev:inngest",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),t.push({type:"node-terminal",request:"launch",name:"Mail",command:"pnpm dev:mail",cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"],env:{NODE_ENV:"development"}}),e.paymentProvider==="stripe"){let r=e.architecture==="separate"?"localhost:3010/auth/stripe/webhook":"localhost:3000/api/auth/stripe/webhook";t.push({type:"node-terminal",request:"launch",name:"Stripe",command:`stripe listen --forward-to ${r}`,cwd:"${workspaceFolder}",skipFiles:["<node_internals>/**"]})}return t}function Ho(e){let t=e.frontend==="nextjs"?"Next.js":"Nuxt",n=[];return e.architecture==="separate"?n.push({name:`Dev (${t} + Backend + Inngest)`,configurations:["Backend",t,"Inngest"]}):n.push({name:`Dev (${t} + Inngest)`,configurations:[t,"Inngest"]}),n}async function Ar(e){let t={version:"0.2.0",configurations:Go(e),compounds:Ho(e)};await l(Ko(e.projectDir,".vscode/launch.json"),JSON.stringify(t,null," ")+`
569
+ `)}import{join as zo}from"path";async function Ir(e){if(e.architecture!=="separate")return;await l(zo(e.projectDir,"apps/backend/src/index.ts"),`import { serve } from "@hono/node-server";
568
570
  import app from "@repo/api";
569
571
  import { closeRedis, env, logger } from "@repo/runtime";
570
572
 
@@ -595,12 +597,12 @@ bootstrap().catch((error) => {
595
597
  logger.error("[Backend] Fatal error", error);
596
598
  process.exit(1);
597
599
  });
598
- `)}import{readFile as Lo}from"fs/promises";import{join as $o}from"path";var cn='import { drizzle } from "drizzle-orm/node-postgres";',ln=`export const db = drizzle(parsed.data.DATABASE_URL, { schema });
599
- export const pool = db.$client;`,jo={postgres:{importLine:cn,instantiation:ln},neon:{importLine:`import { neon } from "@neondatabase/serverless";
600
+ `)}import{readFile as Yo}from"fs/promises";import{join as Jo}from"path";var dn='import { drizzle } from "drizzle-orm/node-postgres";',un=`export const db = drizzle(parsed.data.DATABASE_URL, { schema });
601
+ export const pool = db.$client;`,qo={postgres:{importLine:dn,instantiation:un},neon:{importLine:`import { neon } from "@neondatabase/serverless";
600
602
  import { drizzle } from "drizzle-orm/neon-http";`,instantiation:`const sql = neon(parsed.data.DATABASE_URL);
601
603
  export const db = drizzle(sql, { schema });`},supabase:{importLine:`import { drizzle } from "drizzle-orm/postgres-js";
602
604
  import postgres from "postgres";`,instantiation:`const client = postgres(parsed.data.DATABASE_URL);
603
- export const db = drizzle(client, { schema });`}};async function gr(e){let t=$o(e.projectDir,"packages/database/src/index.ts"),n=await Lo(t,"utf-8");if(!n.includes(cn)||!n.includes(ln))throw new Error("generateDbDriver: boilerplate packages/database/src/index.ts is missing the node-postgres driver anchors (the import line or the `db` instantiation block); the boilerplate drifted.");let r=jo[e.databaseProvider],i=n.replace(cn,r.importLine).replace(ln,r.instantiation);await l(t,i)}import{join as xt}from"path";async function hr(e){switch(e.cacheProvider){case"redis":await Uo(e),await Mo(e);break;case"upstash":await Vo(e),await Bo(e);break}}async function Uo(e){await l(xt(e.projectDir,"packages/runtime/src/redis.ts"),`import type { Store } from "hono-rate-limiter";
605
+ export const db = drizzle(client, { schema });`}};async function Pr(e){let t=Jo(e.projectDir,"packages/database/src/index.ts"),n=await Yo(t,"utf-8");if(!n.includes(dn)||!n.includes(un))throw new Error("generateDbDriver: boilerplate packages/database/src/index.ts is missing the node-postgres driver anchors (the import line or the `db` instantiation block); the boilerplate drifted.");let r=qo[e.databaseProvider],i=n.replace(dn,r.importLine).replace(un,r.instantiation);await l(t,i)}import{join as Nt}from"path";async function Tr(e){switch(e.cacheProvider){case"redis":await Wo(e),await Xo(e);break;case"upstash":await Zo(e),await Qo(e);break}}async function Wo(e){await l(Nt(e.projectDir,"packages/runtime/src/redis.ts"),`import type { Store } from "hono-rate-limiter";
604
606
  import { Redis } from "ioredis";
605
607
  import { RedisStore, type RedisReply } from "rate-limit-redis";
606
608
  import { env } from "./env";
@@ -729,7 +731,7 @@ export async function closeRedis() {
729
731
  closed = true;
730
732
  }
731
733
  }
732
- `)}async function Mo(e){await l(xt(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Mutex } from "redis-semaphore";
734
+ `)}async function Xo(e){await l(Nt(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Mutex } from "redis-semaphore";
733
735
  import { redis } from "./redis";
734
736
 
735
737
  export class MutexTimeoutError extends Error {
@@ -766,7 +768,7 @@ export async function withMutex<T>(
766
768
  await mutex.release();
767
769
  }
768
770
  }
769
- `)}async function Vo(e){await l(xt(e.projectDir,"packages/runtime/src/redis.ts"),`import { Redis } from "@upstash/redis";
771
+ `)}async function Zo(e){await l(Nt(e.projectDir,"packages/runtime/src/redis.ts"),`import { Redis } from "@upstash/redis";
770
772
  import type { Store } from "hono-rate-limiter";
771
773
  import { env } from "./env";
772
774
 
@@ -884,7 +886,7 @@ export const limiterStore: Store = createLimiterStore();
884
886
 
885
887
  /** No persistent connection to close with Upstash REST. */
886
888
  export async function closeRedis(): Promise<void> {}
887
- `)}async function Bo(e){await l(xt(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Lock } from "@upstash/lock";
889
+ `)}async function Qo(e){await l(Nt(e.projectDir,"packages/runtime/src/mutex.ts"),`import { Lock } from "@upstash/lock";
888
890
  import { redis } from "./redis";
889
891
 
890
892
  export class MutexTimeoutError extends Error {
@@ -929,7 +931,7 @@ export async function withMutex<T>(
929
931
  await lock.release();
930
932
  }
931
933
  }
932
- `)}async function yr(e){await l(`${e.projectDir}/packages/runtime/src/env.ts`,Fo(e))}function Fo(e){return`import { z } from "zod";
934
+ `)}async function Rr(e){await l(`${e.projectDir}/packages/runtime/src/env.ts`,ea(e))}function ea(e){return`import { z } from "zod";
933
935
 
934
936
  const EnvSchema = z.object({
935
937
  NODE_ENV: z.enum(["development", "production"]).default("development"),
@@ -1050,13 +1052,13 @@ export const env = (() => {
1050
1052
  const parsedApiUrl = new URL(env.API_URL);
1051
1053
  export const apiBasePath = parsedApiUrl.pathname === "/" ? "" : parsedApiUrl.pathname;
1052
1054
  export const apiOrigin = parsedApiUrl.origin;
1053
- `}import{readFile as Ko}from"fs/promises";import{join as re}from"path";var Ct={"@upstash/redis":"^1.37.0","@upstash/lock":"^0.2.1","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7"};async function He(e){let t=await Ko(e,"utf-8");return JSON.parse(t)}async function ze(e,t){await l(e,JSON.stringify(t,null," ")+`
1054
- `)}function ct(e,t){for(let n of t)delete e.dependencies?.[n],delete e.devDependencies?.[n]}function Ge(e,t,n,r=!1){let i=r?"devDependencies":"dependencies";e[i]||(e[i]={}),e[i][t]=n}async function vr(e){await Go(e),await Ho(e),await zo(e),await Yo(e),e.frontend==="nextjs"?await Jo(e):await qo(e)}async function Go(e){let t=re(e.projectDir,"packages/api/package.json"),n=await He(t);ct(n,["sharp","@types/sharp"]),await ze(t,n)}async function Ho(e){let t=re(e.projectDir,"packages/runtime/package.json"),n=await He(t);e.cacheProvider==="upstash"&&(ct(n,["ioredis","rate-limit-redis","redis-semaphore"]),Ge(n,"@upstash/redis",Ct["@upstash/redis"]),Ge(n,"@upstash/lock",Ct["@upstash/lock"])),await ze(t,n)}async function zo(e){let t=re(e.projectDir,"packages/database/package.json"),n=await He(t);e.databaseProvider==="neon"?(ct(n,["pg","@types/pg"]),Ge(n,"@neondatabase/serverless",Ct["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(ct(n,["pg","@types/pg"]),Ge(n,"postgres",Ct.postgres)),await ze(t,n)}async function Yo(e){if(e.architecture!=="separate")return;let t=re(e.projectDir,"apps/backend/package.json"),n=await He(t);e.deploymentTarget!=="node"&&ct(n,["@hono/node-server"]),await ze(t,n)}async function qo(e){if(e.architecture!=="separate")return;let t=re(e.projectDir,"apps/web-nuxt");await rn(re(t,"server/api/[...paths].ts"),t);let n=re(t,"package.json"),r=await He(n),i=r.dependencies?.["@repo/api"];i&&(delete r.dependencies?.["@repo/api"],Ge(r,"@repo/api",i,!0)),await ze(n,r)}async function Jo(e){if(e.architecture!=="separate")return;let t=re(e.projectDir,"apps/web-next");await rn(re(t,"app/api/[[...rest]]/route.ts"),t);let n=re(t,"package.json"),r=await He(n),i=r.dependencies?.["@repo/api"];i&&(delete r.dependencies?.["@repo/api"],Ge(r,"@repo/api",i,!0)),await ze(n,r)}import{readFile as kr}from"fs/promises";import{join as wr}from"path";async function Sr(e){let t=wr(e.projectDir,"turbo.json"),n;try{n=await kr(t,"utf-8")}catch{return}let r=JSON.parse(n),i=r.tasks?.build;if(!i)return;let o=e.frontend==="nextjs"?"NUXT_PUBLIC_*":"NEXT_PUBLIC_*",a=e.frontend==="nextjs"?new Set([".nuxt/**",".output/**"]):new Set([".next/**","!.next/cache/**"]),s=!1;if(Array.isArray(i.env)){let d=i.env.filter(m=>m!==o);d.length!==i.env.length&&(i.env=d,s=!0)}if(Array.isArray(i.outputs)){let d=i.outputs.filter(m=>!a.has(m));d.length!==i.outputs.length&&(i.outputs=d,s=!0)}s&&await l(t,JSON.stringify(r,null," ")+`
1055
- `)}var Wo=["base.json","node.json","next.json"],br="GenerateSaaS ";async function Er(e){if(!e.demo)for(let t of Wo){let n=wr(e.projectDir,"tooling/typescript",t),r;try{r=await kr(n,"utf-8")}catch{continue}let i=JSON.parse(r);typeof i.display!="string"||!i.display.startsWith(br)||(i.display=i.display.slice(br.length),await l(n,JSON.stringify(i,null," ")+`
1056
- `))}}import{readFile as Xo,rm as Zo}from"fs/promises";import{existsSync as Ar}from"fs";import{join as Ir}from"path";async function Pr(e){if(e.frontend==="nuxt")return;let t=Ir(e.projectDir,"packages/i18n/package.json");if(!Ar(t))throw new Error(`pruneI18nNuxt: expected ${t} to exist - did the i18n package move?`);let n=JSON.parse(await Xo(t,"utf-8")),r=!!(n.exports?.["./module"]??n.exports?.["./nuxt"]),i=!1;if(n.exports)for(let a of["./module","./nuxt"])a in n.exports&&(delete n.exports[a],i=!0);n.devDependencies&&"@nuxt/kit"in n.devDependencies&&(delete n.devDependencies["@nuxt/kit"],i=!0),i&&await l(t,JSON.stringify(n,null," ")+`
1057
- `);let o=Ir(e.projectDir,"packages/i18n/nuxt");if(r&&!Ar(o))throw new Error(`pruneI18nNuxt: packages/i18n declares a Nuxt export surface but ${o} is missing - did the i18n Nuxt module move?`);await Zo(o,{recursive:!0,force:!0})}import{readFile as Tr,rm as Qo}from"fs/promises";import{join as pn}from"path";async function Rr(e){e.cacheProvider==="upstash"&&await Promise.all([ea(e.projectDir),ta(e.projectDir),Qo(pn(e.projectDir,"packages/runtime/tests/redis.test.ts"),{force:!0})])}async function ea(e){let t=pn(e,"packages/runtime/tests/setup.ts"),n;try{n=await Tr(t,"utf-8")}catch{return}let r=n.replace(/\tREDIS_URL:\s*"[^"]*",?\n/,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1055
+ `}import{readFile as ta}from"fs/promises";import{join as oe}from"path";var Lt={"@upstash/redis":"^1.37.0","@upstash/lock":"^0.2.1","@neondatabase/serverless":"^1.0.1",postgres:"^3.4.7"};async function We(e){let t=await ta(e,"utf-8");return JSON.parse(t)}async function Xe(e,t){await l(e,JSON.stringify(t,null," ")+`
1056
+ `)}function dt(e,t){for(let n of t)delete e.dependencies?.[n],delete e.devDependencies?.[n]}function qe(e,t,n,r=!1){let i=r?"devDependencies":"dependencies";e[i]||(e[i]={}),e[i][t]=n}async function _r(e){await na(e),await ra(e),await ia(e),await oa(e),e.frontend==="nextjs"?await sa(e):await aa(e)}async function na(e){let t=oe(e.projectDir,"packages/api/package.json"),n=await We(t);dt(n,["sharp","@types/sharp"]),await Xe(t,n)}async function ra(e){let t=oe(e.projectDir,"packages/runtime/package.json"),n=await We(t);e.cacheProvider==="upstash"&&(dt(n,["ioredis","rate-limit-redis","redis-semaphore"]),qe(n,"@upstash/redis",Lt["@upstash/redis"]),qe(n,"@upstash/lock",Lt["@upstash/lock"])),await Xe(t,n)}async function ia(e){let t=oe(e.projectDir,"packages/database/package.json"),n=await We(t);e.databaseProvider==="neon"?(dt(n,["pg","@types/pg"]),qe(n,"@neondatabase/serverless",Lt["@neondatabase/serverless"])):e.databaseProvider==="supabase"&&(dt(n,["pg","@types/pg"]),qe(n,"postgres",Lt.postgres)),await Xe(t,n)}async function oa(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/backend/package.json"),n=await We(t);e.deploymentTarget!=="node"&&dt(n,["@hono/node-server"]),await Xe(t,n)}async function aa(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/web-nuxt");await an(oe(t,"server/api/[...paths].ts"),t);let n=oe(t,"package.json"),r=await We(n),i=r.dependencies?.["@repo/api"];i&&(delete r.dependencies?.["@repo/api"],qe(r,"@repo/api",i,!0)),await Xe(n,r)}async function sa(e){if(e.architecture!=="separate")return;let t=oe(e.projectDir,"apps/web-next");await an(oe(t,"app/api/[[...rest]]/route.ts"),t);let n=oe(t,"package.json"),r=await We(n),i=r.dependencies?.["@repo/api"];i&&(delete r.dependencies?.["@repo/api"],qe(r,"@repo/api",i,!0)),await Xe(n,r)}import{readFile as xr}from"fs/promises";import{join as Cr}from"path";async function Dr(e){let t=Cr(e.projectDir,"turbo.json"),n;try{n=await xr(t,"utf-8")}catch{return}let r=JSON.parse(n),i=r.tasks?.build;if(!i)return;let o=e.frontend==="nextjs"?"NUXT_PUBLIC_*":"NEXT_PUBLIC_*",a=e.frontend==="nextjs"?new Set([".nuxt/**",".output/**"]):new Set([".next/**","!.next/cache/**"]),s=!1;if(Array.isArray(i.env)){let d=i.env.filter(m=>m!==o);d.length!==i.env.length&&(i.env=d,s=!0)}if(Array.isArray(i.outputs)){let d=i.outputs.filter(m=>!a.has(m));d.length!==i.outputs.length&&(i.outputs=d,s=!0)}s&&await l(t,JSON.stringify(r,null," ")+`
1057
+ `)}var ca=["base.json","node.json","next.json"],Or="GenerateSaaS ";async function Nr(e){if(!e.demo)for(let t of ca){let n=Cr(e.projectDir,"tooling/typescript",t),r;try{r=await xr(n,"utf-8")}catch{continue}let i=JSON.parse(r);typeof i.display!="string"||!i.display.startsWith(Or)||(i.display=i.display.slice(Or.length),await l(n,JSON.stringify(i,null," ")+`
1058
+ `))}}import{readFile as la,rm as pa}from"fs/promises";import{existsSync as Lr}from"fs";import{join as $r}from"path";async function jr(e){if(e.frontend==="nuxt")return;let t=$r(e.projectDir,"packages/i18n/package.json");if(!Lr(t))throw new Error(`pruneI18nNuxt: expected ${t} to exist - did the i18n package move?`);let n=JSON.parse(await la(t,"utf-8")),r=!!(n.exports?.["./module"]??n.exports?.["./nuxt"]),i=!1;if(n.exports)for(let a of["./module","./nuxt"])a in n.exports&&(delete n.exports[a],i=!0);n.devDependencies&&"@nuxt/kit"in n.devDependencies&&(delete n.devDependencies["@nuxt/kit"],i=!0),i&&await l(t,JSON.stringify(n,null," ")+`
1059
+ `);let o=$r(e.projectDir,"packages/i18n/nuxt");if(r&&!Lr(o))throw new Error(`pruneI18nNuxt: packages/i18n declares a Nuxt export surface but ${o} is missing - did the i18n Nuxt module move?`);await pa(o,{recursive:!0,force:!0})}import{readFile as Ur,rm as da}from"fs/promises";import{join as mn}from"path";async function Mr(e){e.cacheProvider==="upstash"&&await Promise.all([ua(e.projectDir),ma(e.projectDir),da(mn(e.projectDir,"packages/runtime/tests/redis.test.ts"),{force:!0})])}async function ua(e){let t=mn(e,"packages/runtime/tests/setup.ts"),n;try{n=await Ur(t,"utf-8")}catch{return}let r=n.replace(/\tREDIS_URL:\s*"[^"]*",?\n/,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1058
1060
  UPSTASH_REDIS_REST_TOKEN: "test-token",
1059
- `);r!==n&&await l(t,r)}async function ta(e){let t=pn(e,"packages/api/tests/setup.ts"),n;try{n=await Tr(t,"utf-8")}catch{return}let r=n;r=r.replace(/\tREDIS_URL:\s*"[^"]*",?\n/g,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1061
+ `);r!==n&&await l(t,r)}async function ma(e){let t=mn(e,"packages/api/tests/setup.ts"),n;try{n=await Ur(t,"utf-8")}catch{return}let r=n;r=r.replace(/\tREDIS_URL:\s*"[^"]*",?\n/g,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1060
1062
  UPSTASH_REDIS_REST_TOKEN: "test-token",
1061
1063
  `),r=r.replace(/vi\.mock\("ioredis"[\s\S]*?\n\}\);\n\n?/,""),r=r.replace(/vi\.mock\("rate-limit-redis"[\s\S]*?\n\}\);\n\n?/,""),r=r.replace(/\t\t\tREDIS_URL:\s*"[^"]*",?\n/,` UPSTASH_REDIS_REST_URL: "https://test.upstash.io",
1062
1064
  UPSTASH_REDIS_REST_TOKEN: "test-token",
@@ -1077,16 +1079,16 @@ vi.mock("@upstash/lock", () => {
1077
1079
  return { Lock };
1078
1080
  });
1079
1081
 
1080
- $1`),r!==n&&await l(t,r)}import{readdir as gn,readFile as $,rm as _}from"fs/promises";import{join as y}from"path";import{readFile as Nt,rm as na}from"fs/promises";import{join as Dt}from"path";function ra(e){return new RegExp(`^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-start(?: \\*\\/\\})?[ \\t]*\\r?\\n[\\s\\S]*?^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-end(?: \\*\\/\\})?[ \\t]*\\r?\\n`,"gm")}function F(e,t,n="ai",r="stripDesktopAi"){let i=ra(n);if(e.match(i)===null)throw new Error(`${r}: expected gsaas ${n} markers in ${t}, but found none (boilerplate drift).`);let o=e.replace(i,"");if(o.includes(`gsaas:${n}-start`)||o.includes(`gsaas:${n}-end`))throw new Error(`${r}: an unbalanced gsaas ${n} marker is left in ${t} (boilerplate drift).`);return o.replace(/\n{3,}/g,`
1082
+ $1`),r!==n&&await l(t,r)}import{readdir as bn,readFile as j,rm as _}from"fs/promises";import{join as y}from"path";import{readFile as jt,rm as fa}from"fs/promises";import{join as $t}from"path";function ga(e){return new RegExp(`^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-start(?: \\*\\/\\})?[ \\t]*\\r?\\n[\\s\\S]*?^[ \\t]*(?:\\/\\/|\\{\\/\\*|\\*) gsaas:${e}-end(?: \\*\\/\\})?[ \\t]*\\r?\\n`,"gm")}function F(e,t,n="ai",r="stripDesktopAi"){let i=ga(n);if(e.match(i)===null)throw new Error(`${r}: expected gsaas ${n} markers in ${t}, but found none (boilerplate drift).`);let o=e.replace(i,"");if(o.includes(`gsaas:${n}-start`)||o.includes(`gsaas:${n}-end`))throw new Error(`${r}: an unbalanced gsaas ${n} marker is left in ${t} (boilerplate drift).`);return o.replace(/\n{3,}/g,`
1081
1083
 
1082
- `)}async function x(e,t,n,r,i){let o=await Nt(e,"utf-8"),a=o.indexOf(t);if(a===-1)throw new Error(`${i}: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(o.indexOf(t,a+t.length)!==-1)throw new Error(`${i}: the ${r} seam appears more than once (boilerplate drift).`);await l(e,o.slice(0,a)+n+o.slice(a+t.length))}function Ye(e,t,n,r){if(!(t in e))throw new Error(`${r}: expected ${n} (boilerplate drift).`);delete e[t]}function Lt(e){return e.frontend==="nextjs"?"next":"nuxt"}async function $t(e,t,n,r,i,o){let a=Dt(e,"docs",t);await na(Dt(a,`${n}.mdx`)),await x(Dt(a,"meta.json"),` "${n}",
1083
- `,"",`${t} meta.json ${n} nav entry`,i);let s=Dt(a,"ai.mdx"),m=(await Nt(s,"utf-8")).split(`
1084
+ `)}async function x(e,t,n,r,i){let o=await jt(e,"utf-8"),a=o.indexOf(t);if(a===-1)throw new Error(`${i}: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(o.indexOf(t,a+t.length)!==-1)throw new Error(`${i}: the ${r} seam appears more than once (boilerplate drift).`);await l(e,o.slice(0,a)+n+o.slice(a+t.length))}function Ze(e,t,n,r){if(!(t in e))throw new Error(`${r}: expected ${n} (boilerplate drift).`);delete e[t]}function Ut(e){return e.frontend==="nextjs"?"next":"nuxt"}async function ut(e,t,n,r,i,o){let a=$t(e,"docs",t);await fa($t(a,`${n}.mdx`)),await x($t(a,"meta.json"),` "${n}",
1085
+ `,"",`${t} meta.json ${n} nav entry`,i);let s=$t(a,"ai.mdx"),m=(await jt(s,"utf-8")).split(`
1084
1086
  `).find(p=>p.includes(`href="${r}"`));if(m===void 0)throw new Error(`${i}: expected the ai.mdx card linking to ${r} (boilerplate drift).`);if(await x(s,`${m}
1085
- `,"",`${t} ai.mdx ${n} card`,i),o!==void 0){let p=`| **${o}** |`,w=(await Nt(s,"utf-8")).split(`
1086
- `).find(b=>b.startsWith(p));if(w===void 0)throw new Error(`${i}: expected the ai.mdx "${o}" hub-table row (boilerplate drift).`);await x(s,`${w}
1087
- `,"",`${t} ai.mdx ${o} hub-table row`,i)}}async function jt(e){let t=`import { config } from "@repo/config";
1088
- `,n=await Nt(e,"utf-8");if(!n.includes(t))return;let r=n.replace(t,""),i=r.replace(/\/\*[\s\S]*?\*\//g,"").replace(/\/\/[^\n]*/g,"").replace(/"(?:\\.|[^"\\])*"/g,'""').replace(/'(?:\\.|[^'\\])*'/g,"''").replace(/`(?:\\.|[^`\\])*`/g,"``");/\bconfig\b/.test(i)||await l(e,r)}import{readFile as ia}from"fs/promises";import{join as oa}from"path";async function dn(e){if(e.rag)return;let t=oa(e.projectDir,"packages/config/src/index.ts"),n=await ia(t,"utf-8");if(!/rag:\s*\{\s*enabled:\s*false\s*\}/.test(n))throw new Error("stripRag: expected `config.rag` emitted with `enabled: false` for a rag-off build, but it was missing (generator drift).")}import{readFile as _r,rm as un}from"fs/promises";import{join as Te}from"path";async function mn(e){if(e.mcpServer)return;let t=e.projectDir,n="stripMcpServer";await un(Te(t,"packages/api/src/routes/internal/ai/mcp.ts")),await un(Te(t,"packages/api/tests/routes/mcp.test.ts")),await un(Te(t,"packages/auth/src/mcp.ts"));let r=Te(t,"packages/api/src/routes/internal/index.ts");await x(r,`import mcpRoutes from "./ai/mcp";
1089
- `,"","internal router mcp import",n),await x(r,'\n// Outward MCP server (`/mcp` + its OAuth `.well-known` discovery), gated on `config.mcpServer`.\n// Mounted at the API root so the discovery metadata sits at `{apiBasePath}/.well-known/...` where\n// an external agent probes it. Off by default, so the routes are absent entirely when disabled. It\n// is not chained into the typed router above: external agents (not the typed RPC client) call it,\n// so it needs no `AppType` inference, and gating it keeps the feature truly inert when off.\nif (config.mcpServer?.enabled) {\n app.route("/", mcpRoutes);\n}\n',"","internal router mcp mount",n),await jt(r);let i=Te(t,"packages/auth/src/config.ts");await x(i,` magicLink,
1087
+ `,"",`${t} ai.mdx ${n} card`,i),o!==void 0){let p=`| **${o}** |`,S=(await jt(s,"utf-8")).split(`
1088
+ `).find(b=>b.startsWith(p));if(S===void 0)throw new Error(`${i}: expected the ai.mdx "${o}" hub-table row (boilerplate drift).`);await x(s,`${S}
1089
+ `,"",`${t} ai.mdx ${o} hub-table row`,i)}}async function Mt(e){let t=`import { config } from "@repo/config";
1090
+ `,n=await jt(e,"utf-8");if(!n.includes(t))return;let r=n.replace(t,""),i=r.replace(/\/\*[\s\S]*?\*\//g,"").replace(/\/\/[^\n]*/g,"").replace(/"(?:\\.|[^"\\])*"/g,'""').replace(/'(?:\\.|[^'\\])*'/g,"''").replace(/`(?:\\.|[^`\\])*`/g,"``");/\bconfig\b/.test(i)||await l(e,r)}import{readFile as ha}from"fs/promises";import{join as ya}from"path";async function fn(e){if(e.rag)return;let t=ya(e.projectDir,"packages/config/src/index.ts"),n=await ha(t,"utf-8");if(!/rag:\s*\{\s*enabled:\s*false\s*\}/.test(n))throw new Error("stripRag: expected `config.rag` emitted with `enabled: false` for a rag-off build, but it was missing (generator drift).")}import{readFile as Vr,rm as gn}from"fs/promises";import{join as Oe}from"path";async function hn(e){if(e.mcpServer)return;let t=e.projectDir,n="stripMcpServer";await gn(Oe(t,"packages/api/src/routes/internal/ai/mcp.ts")),await gn(Oe(t,"packages/api/tests/routes/mcp.test.ts")),await gn(Oe(t,"packages/auth/src/mcp.ts"));let r=Oe(t,"packages/api/src/routes/internal/index.ts");await x(r,`import mcpRoutes from "./ai/mcp";
1091
+ `,"","internal router mcp import",n),await x(r,'\n// Outward MCP server (`/mcp` + its OAuth `.well-known` discovery), gated on `config.mcpServer`.\n// Mounted at the API root so the discovery metadata sits at `{apiBasePath}/.well-known/...` where\n// an external agent probes it. Off by default, so the routes are absent entirely when disabled. It\n// is not chained into the typed router above: external agents (not the typed RPC client) call it,\n// so it needs no `AppType` inference, and gating it keeps the feature truly inert when off.\nif (config.mcpServer?.enabled) {\n app.route("/", mcpRoutes);\n}\n',"","internal router mcp mount",n),await Mt(r);let i=Oe(t,"packages/auth/src/config.ts");await x(i,` magicLink,
1090
1092
  mcp,
1091
1093
  organization,`,` magicLink,
1092
1094
  organization,`,"auth config mcp plugin import",n),await x(i,` // Outward MCP server: turns Better Auth into an OAuth 2.1 provider so an
@@ -1096,9 +1098,9 @@ $1`),r!==n&&await l(t,r)}import{readdir as gn,readFile as $,rm as _}from"fs/prom
1096
1098
  ...(config.mcpServer?.enabled
1097
1099
  ? [mcp({ loginPage: \`\${config.baseUrl}\${config.routes.auth}/login\` })]
1098
1100
  : []),
1099
- `,"","auth config mcp plugin block",n);let o=Te(t,"packages/auth/package.json"),a=JSON.parse(await _r(o,"utf-8"));if(!a.exports)throw new Error(`${n}: expected an exports map in packages/auth/package.json (boilerplate drift).`);Ye(a.exports,"./mcp",'the "./mcp" export in packages/auth/package.json',n),await l(o,JSON.stringify(a,null," ")+`
1100
- `);let s=Te(t,"packages/api/package.json"),d=JSON.parse(await _r(s,"utf-8"));if(!d.dependencies)throw new Error(`${n}: expected dependencies in packages/api/package.json (boilerplate drift).`);Ye(d.dependencies,"@modelcontextprotocol/sdk","@modelcontextprotocol/sdk in packages/api dependencies",n),await l(s,JSON.stringify(d,null," ")+`
1101
- `);let m=Lt(e);await $t(t,m,"companion-agent-mcp",`/${m}/companion-agent-mcp`,n,"MCP")}import{rm as qe}from"fs/promises";import{join as Je}from"path";import{readFile as Or}from"fs/promises";import{join as lt}from"path";async function xr(e,t){let n=lt(e,"packages/api/src/routes/internal/index.ts");await l(n,F(await Or(n,"utf-8"),"internal router","companion",t)),await jt(n);let r=lt(e,"packages/api/src/ai/schedule-runner.ts");await l(r,F(await Or(r,"utf-8"),"schedule-runner.ts","companion",t));let i=lt(e,"packages/api/src/ai/settings-store.ts");await x(i,`import { parseCompanionKey } from "../relay/companion-key";
1101
+ `,"","auth config mcp plugin block",n);let o=Oe(t,"packages/auth/package.json"),a=JSON.parse(await Vr(o,"utf-8"));if(!a.exports)throw new Error(`${n}: expected an exports map in packages/auth/package.json (boilerplate drift).`);Ze(a.exports,"./mcp",'the "./mcp" export in packages/auth/package.json',n),await l(o,JSON.stringify(a,null," ")+`
1102
+ `);let s=Oe(t,"packages/api/package.json"),d=JSON.parse(await Vr(s,"utf-8"));if(!d.dependencies)throw new Error(`${n}: expected dependencies in packages/api/package.json (boilerplate drift).`);Ze(d.dependencies,"@modelcontextprotocol/sdk","@modelcontextprotocol/sdk in packages/api dependencies",n),await l(s,JSON.stringify(d,null," ")+`
1103
+ `);let m=Ut(e);await ut(t,m,"companion-agent-mcp",`/${m}/companion-agent-mcp`,n,"MCP")}import{rm as ke}from"fs/promises";import{join as we}from"path";import{readFile as Br}from"fs/promises";import{join as mt}from"path";async function Fr(e,t){let n=mt(e,"packages/api/src/routes/internal/index.ts");await l(n,F(await Br(n,"utf-8"),"internal router","companion",t)),await Mt(n);let r=mt(e,"packages/api/src/ai/schedule-runner.ts");await l(r,F(await Br(r,"utf-8"),"schedule-runner.ts","companion",t));let i=mt(e,"packages/api/src/ai/settings-store.ts");await x(i,`import { parseCompanionKey } from "../relay/companion-key";
1102
1104
 
1103
1105
  `,"","settings-store.ts relay import",t),await x(i," * - COMPANION (when `config.companion.enabled`): a well-formed companion key\n * `<connectionId>@<deviceId>@<modelId>` is also accepted, so a default/fallback model that points\n * at a paired CLI persists (the run path resolves it, and the daemon handles an offline device).\n * Without this, the `@`-separated key is neither a registry key nor a `provider::modelId` key, so\n * it would silently clear to `null` on save and vanish on reload.\n","","settings-store.ts COMPANION docstring bullet",t),await x(i," *\n * When `opts.allowCompanion` is `false`, a companion key is REJECTED even when the companion is\n * enabled - used by the builder-task surfaces, whose runs are background/cloud-only and can never\n * dispatch to a device-bound CLI.\n","","settings-store.ts opts.allowCompanion docstring paragraph",t),await x(i," * @param opts - `allowCompanion` (default `true`) controls companion-key acceptance.\n","","settings-store.ts @param opts",t),await x(i,`export function validModelKey(
1104
1106
  key: string | null | undefined,
@@ -1112,7 +1114,7 @@ $1`),r!==n&&await l(t,r)}import{readdir as gn,readFile as $,rm as _}from"fs/prom
1112
1114
  ) {
1113
1115
  return key;
1114
1116
  }
1115
- `,"","settings-store.ts companion-key branch",t);let o=lt(e,"packages/api/src/ai/task-run.ts");await x(o,`import { parseCompanionKey } from "../relay/companion-key";
1117
+ `,"","settings-store.ts companion-key branch",t);let o=mt(e,"packages/api/src/ai/task-run.ts");await x(o,`import { parseCompanionKey } from "../relay/companion-key";
1116
1118
  `,"","task-run.ts relay import",t),await x(o,`/** Whether a chain link is usable for a task run: present and not a companion (device) key. */
1117
1119
  `,`/** Whether a chain link is usable for a task run: a present, non-empty key. */
1118
1120
  `,"task-run.ts usableTaskModelKey docstring",t),await x(o,` return typeof key === "string" && key.length > 0 && parseCompanionKey(key) === null;
@@ -1120,16 +1122,16 @@ $1`),r!==n&&await l(t,r)}import{readdir as gn,readFile as $,rm as _}from"fs/prom
1120
1122
  `,"task-run.ts usableTaskModelKey body",t),await x(o,` * override, then the builder's \`defaults.web.model\`, then the acting user's account default -
1121
1123
  * skipping companion (device-bound) links, which are valid for chat but never for a background
1122
1124
  * task - and delegating the final resolution to {@link resolveChatRun}, which owns BYOK/platform
1123
- `," * override, then the builder's `defaults.web.model`, then the acting user's account default,\n * delegating the final resolution to {@link resolveChatRun}, which owns BYOK/platform\n","task-run.ts resolveTaskRun docstring model chain",t);let a=lt(e,"packages/api/src/routes/internal/ai/tasks-router.ts");await x(a,` modelKey: validModelKey(override?.modelKey ?? null, { allowCompanion: false }),
1125
+ `," * override, then the builder's `defaults.web.model`, then the acting user's account default,\n * delegating the final resolution to {@link resolveChatRun}, which owns BYOK/platform\n","task-run.ts resolveTaskRun docstring model chain",t);let a=mt(e,"packages/api/src/routes/internal/ai/tasks-router.ts");await x(a,` modelKey: validModelKey(override?.modelKey ?? null, { allowCompanion: false }),
1124
1126
  `,` modelKey: validModelKey(override?.modelKey ?? null),
1125
1127
  `,"tasks-router.ts listTaskOverrides validModelKey",t),await x(a,` if (typeof body.modelKey === "string" && validModelKey(body.modelKey, { allowCompanion: false }) === null) {
1126
1128
  `,` if (typeof body.modelKey === "string" && validModelKey(body.modelKey) === null) {
1127
- `,"tasks-router.ts putTask validModelKey",t)}async function fn(e){if(e.companion)return;let t=e.projectDir,n="stripCompanion";await qe(Je(t,"packages/api/src/relay"),{recursive:!0}),await qe(Je(t,"packages/api/tests/relay"),{recursive:!0}),await qe(Je(t,"packages/api/src/routes/internal/companion.ts")),await qe(Je(t,"packages/api/src/routes/internal/companion-transport.ts")),await qe(Je(t,"packages/api/tests/routes/companion.test.ts")),await qe(Je(t,"packages/api/tests/routes/companion-transport.test.ts")),await xr(t,n);let r=Lt(e);await $t(t,r,"companion",`/${r}/companion`,n,"Companions")}var aa=new Set(["ci.yml","tauri-release.yml"]),sa=["cli","cli:clean","demo:bench","playground:regen","playground:test","playground:test:units","playground:test:build","opencompanion:export","opencompanion:verify"];async function Cr(e){let t=y(e.projectDir,".github/workflows"),n=await gn(t).catch(()=>[]);for(let r of n)aa.has(r)||await _(y(t,r),{recursive:!0,force:!0})}async function Dr(e){let t=y(e.projectDir,"package.json"),n=await $(t,"utf-8"),r=JSON.parse(n),i=!1;if(r.scripts){for(let o of sa)o in r.scripts&&(delete r.scripts[o],i=!0);if(!vt(e))for(let o of["infra","infra:stop"])o in r.scripts&&(delete r.scripts[o],i=!0)}i&&await l(t,JSON.stringify(r,null," ")+`
1128
- `)}async function Nr(e){let t=y(e.projectDir,"package.json"),n=await $(t,"utf-8"),r=JSON.parse(n);!r.scripts||!("dev"in r.scripts)||(r.scripts.dev=e.architecture==="separate"?"turbo run dev --continue":"turbo run dev --continue --filter=!backend",await l(t,JSON.stringify(r,null," ")+`
1129
- `))}async function Lr(e){let t=e.frontend==="nextjs"?"apps/web-nuxt":"apps/web-next";await _(y(e.projectDir,t),{recursive:!0,force:!0})}async function $r(e){e.docs||await _(y(e.projectDir,"apps/docs"),{recursive:!0})}async function jr(e){let t=e.frontend==="nextjs"?"docs/nuxt":"docs/next";if(await _(y(e.projectDir,t),{recursive:!0,force:!0}),await _(y(e.projectDir,"docs/index.mdx")),!e.desktop)await _(y(e.projectDir,"docs/desktop"),{recursive:!0,force:!0});else if(!e.desktopAi){await _(y(e.projectDir,"docs/desktop/ai"),{recursive:!0,force:!0});let n=y(e.projectDir,"docs/desktop/meta.json"),r=JSON.parse(await $(n,"utf-8"));r.pages=r.pages.filter(i=>i!=="ai"),await l(n,`${JSON.stringify(r,null,2)}
1130
- `)}e.companion||await _(y(e.projectDir,"docs/opencompanion"),{recursive:!0,force:!0})}async function Ur(e){if(e.desktop)return;await _(y(e.projectDir,"apps/tauri"),{recursive:!0});let t=y(e.projectDir,"packages/i18n/translations");for(let n of await gn(t,{withFileTypes:!0}))n.isDirectory()&&await _(y(t,n.name,"desktop.json"),{force:!0});await _(y(e.projectDir,".github/workflows/tauri-release.yml"))}async function Mr(e){e.desktop&&e.desktopAi||(await _(y(e.projectDir,"packages/agent-runtime"),{recursive:!0}),await _(y(e.projectDir,"packages/agent-core"),{recursive:!0}))}function C(e,t,n,r){let i=e.indexOf(t);if(i===-1)throw new Error(`stripDesktopAi: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(e.indexOf(t,i+t.length)!==-1)throw new Error(`stripDesktopAi: the ${r} seam appears more than once (boilerplate drift).`);return e.slice(0,i)+n+e.slice(i+t.length)}async function Vr(e){if(!e.desktop||e.desktopAi)return;let t=e.projectDir;await _(y(t,"apps/tauri/sidecar"),{recursive:!0}),await _(y(t,"apps/tauri/tsconfig.sidecar.json")),await _(y(t,"apps/tauri/tsup.sidecar.config.ts")),await _(y(t,"apps/tauri/tests/sidecar"),{recursive:!0}),await _(y(t,"apps/tauri/src-tauri/src/daemon.rs")),await _(y(t,"apps/tauri/scripts/stage-sidecar.mjs")),await _(y(t,"apps/tauri/scripts/sign-nested.mjs")),await _(y(t,"apps/tauri/resources/ai-skills"),{recursive:!0}),await _(y(t,"apps/tauri/src-tauri/resources"),{recursive:!0,force:!0});for(let a of["apps/tauri/src/screens/agents","apps/tauri/src/screens/integrations","apps/tauri/src/screens/ai","apps/tauri/src/screens/schedules.tsx","apps/tauri/src/hooks/use-ai.ts","apps/tauri/src/hooks/use-ai-chat.ts","apps/tauri/src/hooks/use-ai-resources.ts","apps/tauri/src/hooks/use-ai-scope.ts","apps/tauri/src/hooks/use-ai-terminal.ts","apps/tauri/src/hooks/use-xterm.ts","apps/tauri/src/hooks/use-async-resource.ts","apps/tauri/src/lib/ai.ts","apps/tauri/src/lib/ai-tab-state.ts","apps/tauri/src/lib/chat-prefs.ts","apps/tauri/src/lib/side-panel-state.ts","apps/tauri/src/lib/task-settings-sync.ts","apps/tauri/src/lib/bridge/ai.ts","apps/tauri/src/lib/bridge/events.ts","apps/tauri/src/lib/bridge/http.ts","apps/tauri/src/lib/bridge/wire-types.ts","apps/tauri/src/lib/bridge/control-info.ts","apps/tauri/src/lib/bridge/status.ts","apps/tauri/src/lib/bridge/types.ts","apps/tauri/src/lib/bridge/deps.ts","apps/tauri/src/components/side-panel-dock.tsx","apps/tauri/src/components/side-panel.tsx","apps/tauri/src/config/side-panels.tsx"])await _(y(t,a),{recursive:!0});for(let a of["apps/tauri/tests/ai-import-boundary.test.ts","apps/tauri/tests/bridge/ai-surface.test.ts","apps/tauri/tests/bridge/control-info.test.ts","apps/tauri/tests/bridge/events.test.ts","apps/tauri/tests/bridge/http.test.ts","apps/tauri/tests/bridge/reconnect.test.ts","apps/tauri/tests/renderer/lib/ai.test.ts","apps/tauri/tests/renderer/lib/ai-tab-state.test.ts","apps/tauri/tests/renderer/lib/chat-prefs.test.ts","apps/tauri/tests/renderer/lib/side-panel-state.test.ts","apps/tauri/tests/renderer/lib/task-settings-sync.test.ts","apps/tauri/tests/renderer/terminal-tools.test.ts","apps/tauri/tests/renderer/use-model-picker.test.ts"])await _(y(t,a));let n=y(t,"apps/tauri/package.json"),r=JSON.parse(await $(n,"utf-8")),i=["@repo/ai","@repo/agent-runtime","@homebridge/node-pty-prebuilt-multiarch","@xterm/xterm","@xterm/addon-fit","ws","@hono/node-server"];for(let a of i){if(!r.dependencies||!(a in r.dependencies))throw new Error(`stripDesktopAi: expected ${a} in apps/tauri dependencies (boilerplate drift).`);delete r.dependencies[a]}for(let a of["@types/ws","tsup"]){if(!r.devDependencies||!(a in r.devDependencies))throw new Error(`stripDesktopAi: expected ${a} in apps/tauri devDependencies (boilerplate drift).`);delete r.devDependencies[a]}if(!r.scripts||!("sidecar:stage"in r.scripts))throw new Error("stripDesktopAi: expected the sidecar:stage script in apps/tauri package.json (boilerplate drift).");if(delete r.scripts["sidecar:stage"],r.scripts["check-types"]!=="tsc -p tsconfig.json --noEmit && tsc -p tsconfig.sidecar.json --noEmit")throw new Error("stripDesktopAi: expected the two-tsconfig check-types script in apps/tauri package.json (boilerplate drift).");r.scripts["check-types"]="tsc -p tsconfig.json --noEmit",await l(n,JSON.stringify(r,null,2)+`
1131
- `),await ga(t);let o=y(t,"packages/i18n/translations");for(let a of await gn(o,{withFileTypes:!0})){if(!a.isDirectory())continue;let s=y(o,a.name,"desktop.json"),d=await $(s,"utf-8").catch(()=>null);if(d===null)continue;let m=JSON.parse(d),p=!1;for(let f of["agents","ai_hub","schedules","integrations"])f in m&&(delete m[f],p=!0);p&&await l(s,JSON.stringify(m,null," ")+`
1132
- `)}}var ca=`/**
1129
+ `,"tasks-router.ts putTask validModelKey",t)}var va=["companion:export","companion:verify","companion:publish"];async function yn(e){if(e.companion)return;let t=e.projectDir,n="stripCompanion";await ke(we(t,"apps/companion"),{recursive:!0}),await ke(we(t,"scripts/companion-export"),{recursive:!0}),await ba(t),await ke(we(t,"packages/api/src/relay"),{recursive:!0}),await ke(we(t,"packages/api/tests/relay"),{recursive:!0}),await ke(we(t,"packages/api/src/routes/internal/companion.ts")),await ke(we(t,"packages/api/src/routes/internal/companion-transport.ts")),await ke(we(t,"packages/api/tests/routes/companion.test.ts")),await ke(we(t,"packages/api/tests/routes/companion-transport.test.ts")),await Fr(t,n);let r=Ut(e);await ut(t,r,"companion",`/${r}/companion`,n,"Companions"),await ut(t,r,"companion-publish",`/${r}/companion-publish`,n)}async function ba(e){await vn(e,va)}var ka=new Set(["ci.yml","tauri-release.yml"]),wa=["cli","cli:clean","demo:bench","playground:regen","playground:test","playground:test:units","playground:test:build","playground:test:companion"];async function Kr(e){let t=y(e.projectDir,".github/workflows"),n=await bn(t).catch(()=>[]);for(let r of n)ka.has(r)||await _(y(t,r),{recursive:!0,force:!0})}async function vn(e,t){let n=y(e,"package.json"),r=JSON.parse(await j(n,"utf-8"));if(!r.scripts)return!1;let i=!1;for(let o of t)o in r.scripts&&(delete r.scripts[o],i=!0);return i&&await l(n,JSON.stringify(r,null," ")+`
1130
+ `),i}async function Gr(e){let t=[...wa];St(e)||t.push("infra","infra:stop"),await vn(e.projectDir,t)}async function Hr(e){let t=y(e.projectDir,"package.json"),n=await j(t,"utf-8"),r=JSON.parse(n);!r.scripts||!("dev"in r.scripts)||(r.scripts.dev=e.architecture==="separate"?"turbo run dev --continue":"turbo run dev --continue --filter=!backend",await l(t,JSON.stringify(r,null," ")+`
1131
+ `))}async function zr(e){let t=e.frontend==="nextjs"?"apps/web-nuxt":"apps/web-next";await _(y(e.projectDir,t),{recursive:!0,force:!0})}async function Yr(e){e.docs||await _(y(e.projectDir,"apps/docs"),{recursive:!0})}async function Jr(e){let t=e.frontend==="nextjs"?"docs/nuxt":"docs/next";if(await _(y(e.projectDir,t),{recursive:!0,force:!0}),await _(y(e.projectDir,"docs/index.mdx")),!e.desktop)await _(y(e.projectDir,"docs/desktop"),{recursive:!0,force:!0});else if(!e.desktopAi){await _(y(e.projectDir,"docs/desktop/ai"),{recursive:!0,force:!0});let n=y(e.projectDir,"docs/desktop/meta.json"),r=JSON.parse(await j(n,"utf-8"));r.pages=r.pages.filter(i=>i!=="ai"),await l(n,`${JSON.stringify(r,null,2)}
1132
+ `)}}async function qr(e){if(e.desktop)return;await _(y(e.projectDir,"apps/tauri"),{recursive:!0});let t=y(e.projectDir,"packages/i18n/translations");for(let n of await bn(t,{withFileTypes:!0}))n.isDirectory()&&await _(y(t,n.name,"desktop.json"),{force:!0});await _(y(e.projectDir,".github/workflows/tauri-release.yml"))}async function Wr(e){let t=e.desktop&&e.desktopAi,n=t||e.companion;t||await _(y(e.projectDir,"packages/agent-runtime"),{recursive:!0}),n||await _(y(e.projectDir,"packages/agent-core"),{recursive:!0})}function C(e,t,n,r){let i=e.indexOf(t);if(i===-1)throw new Error(`stripDesktopAi: expected to find the ${r} seam, but it was missing (boilerplate drift).`);if(e.indexOf(t,i+t.length)!==-1)throw new Error(`stripDesktopAi: the ${r} seam appears more than once (boilerplate drift).`);return e.slice(0,i)+n+e.slice(i+t.length)}async function Xr(e){if(!e.desktop||e.desktopAi)return;let t=e.projectDir;await _(y(t,"apps/tauri/sidecar"),{recursive:!0}),await _(y(t,"apps/tauri/tsconfig.sidecar.json")),await _(y(t,"apps/tauri/tsup.sidecar.config.ts")),await _(y(t,"apps/tauri/tests/sidecar"),{recursive:!0}),await _(y(t,"apps/tauri/src-tauri/src/daemon.rs")),await _(y(t,"apps/tauri/scripts/stage-sidecar.mjs")),await _(y(t,"apps/tauri/scripts/sign-nested.mjs")),await _(y(t,"apps/tauri/resources/ai-skills"),{recursive:!0}),await _(y(t,"apps/tauri/src-tauri/resources"),{recursive:!0,force:!0});for(let a of["apps/tauri/src/screens/agents","apps/tauri/src/screens/integrations","apps/tauri/src/screens/ai","apps/tauri/src/screens/schedules.tsx","apps/tauri/src/hooks/use-ai.ts","apps/tauri/src/hooks/use-ai-chat.ts","apps/tauri/src/hooks/use-ai-resources.ts","apps/tauri/src/hooks/use-ai-scope.ts","apps/tauri/src/hooks/use-ai-terminal.ts","apps/tauri/src/hooks/use-xterm.ts","apps/tauri/src/hooks/use-async-resource.ts","apps/tauri/src/lib/ai.ts","apps/tauri/src/lib/ai-tab-state.ts","apps/tauri/src/lib/chat-prefs.ts","apps/tauri/src/lib/side-panel-state.ts","apps/tauri/src/lib/task-settings-sync.ts","apps/tauri/src/lib/bridge/ai.ts","apps/tauri/src/lib/bridge/events.ts","apps/tauri/src/lib/bridge/http.ts","apps/tauri/src/lib/bridge/wire-types.ts","apps/tauri/src/lib/bridge/control-info.ts","apps/tauri/src/lib/bridge/status.ts","apps/tauri/src/lib/bridge/types.ts","apps/tauri/src/lib/bridge/deps.ts","apps/tauri/src/components/side-panel-dock.tsx","apps/tauri/src/components/side-panel.tsx","apps/tauri/src/config/side-panels.tsx"])await _(y(t,a),{recursive:!0});for(let a of["apps/tauri/tests/ai-import-boundary.test.ts","apps/tauri/tests/bridge/ai-surface.test.ts","apps/tauri/tests/bridge/control-info.test.ts","apps/tauri/tests/bridge/events.test.ts","apps/tauri/tests/bridge/http.test.ts","apps/tauri/tests/bridge/reconnect.test.ts","apps/tauri/tests/renderer/lib/ai.test.ts","apps/tauri/tests/renderer/lib/ai-tab-state.test.ts","apps/tauri/tests/renderer/lib/chat-prefs.test.ts","apps/tauri/tests/renderer/lib/side-panel-state.test.ts","apps/tauri/tests/renderer/lib/task-settings-sync.test.ts","apps/tauri/tests/renderer/terminal-tools.test.ts","apps/tauri/tests/renderer/use-model-picker.test.ts"])await _(y(t,a));let n=y(t,"apps/tauri/package.json"),r=JSON.parse(await j(n,"utf-8")),i=["@repo/ai","@repo/agent-runtime","@homebridge/node-pty-prebuilt-multiarch","@xterm/xterm","@xterm/addon-fit","ws","@hono/node-server"];for(let a of i){if(!r.dependencies||!(a in r.dependencies))throw new Error(`stripDesktopAi: expected ${a} in apps/tauri dependencies (boilerplate drift).`);delete r.dependencies[a]}for(let a of["@types/ws","tsup"]){if(!r.devDependencies||!(a in r.devDependencies))throw new Error(`stripDesktopAi: expected ${a} in apps/tauri devDependencies (boilerplate drift).`);delete r.devDependencies[a]}if(!r.scripts||!("sidecar:stage"in r.scripts))throw new Error("stripDesktopAi: expected the sidecar:stage script in apps/tauri package.json (boilerplate drift).");if(delete r.scripts["sidecar:stage"],r.scripts["check-types"]!=="tsc -p tsconfig.json --noEmit && tsc -p tsconfig.sidecar.json --noEmit")throw new Error("stripDesktopAi: expected the two-tsconfig check-types script in apps/tauri package.json (boilerplate drift).");r.scripts["check-types"]="tsc -p tsconfig.json --noEmit",await l(n,JSON.stringify(r,null,2)+`
1133
+ `),await _a(t);let o=y(t,"packages/i18n/translations");for(let a of await bn(o,{withFileTypes:!0})){if(!a.isDirectory())continue;let s=y(o,a.name,"desktop.json"),d=await j(s,"utf-8").catch(()=>null);if(d===null)continue;let m=JSON.parse(d),p=!1;for(let f of["agents","ai_hub","schedules","integrations"])f in m&&(delete m[f],p=!0);p&&await l(s,JSON.stringify(m,null," ")+`
1134
+ `)}}var Sa=`/**
1133
1135
  * Assembles a full bridge over the injected {@link BridgeDeps} seams. Wires the control-info source,
1134
1136
  * the engine HTTP transport, the shared status store, the event hub, the host auth-token sync, the
1135
1137
  * native surface (registering the reconnect auth resync via the hub), and the ai surface (folding in
@@ -1169,7 +1171,7 @@ export function createBridge(deps: BridgeDeps): { bridge: Bridge; status: Status
1169
1171
  })
1170
1172
  const ai = createAiBridge({ http, events, pickWorkspace })
1171
1173
  return { bridge: { ...native, ai }, status }
1172
- }`,la=`/**
1174
+ }`,Ea=`/**
1173
1175
  * Assembles the native bridge over the injected Tauri command/event seams. The \`invoke\` and \`listen\`
1174
1176
  * primitives are injected so a bridge can be built against fakes in tests; this factory imports the
1175
1177
  * real plugin functions (opener / notification / updater / process / dialog) directly, which the
@@ -1195,7 +1197,7 @@ export function createBridge(deps: {
1195
1197
  isDev: import.meta.env.DEV
1196
1198
  })
1197
1199
  return { bridge: native }
1198
- }`,pa=`/** The four production seams: \`globalThis\` fetch/WebSocket + the real Tauri command/event primitives. */
1200
+ }`,Aa=`/** The four production seams: \`globalThis\` fetch/WebSocket + the real Tauri command/event primitives. */
1199
1201
  function productionDeps(): BridgeDeps {
1200
1202
  return {
1201
1203
  fetchFn: (input, init) => fetch(input, init),
@@ -1229,7 +1231,7 @@ function lazyForward<T extends object>(build: () => T): T {
1229
1231
  export const bridge: Bridge = lazyForward(() => productionInstance().bridge)
1230
1232
 
1231
1233
  /** The production status store feeding the reconnect indicator. */
1232
- export const bridgeStatus: StatusStore = lazyForward(() => productionInstance().status)`,da=`/** The two production seams: the real Tauri command/event primitives. */
1234
+ export const bridgeStatus: StatusStore = lazyForward(() => productionInstance().status)`,Ia=`/** The two production seams: the real Tauri command/event primitives. */
1233
1235
  function productionDeps(): {
1234
1236
  invoke: <T>(cmd: string, args?: Record<string, unknown>) => Promise<T>
1235
1237
  listen: (event: string, handler: (event: { payload: unknown }) => void) => Promise<() => void>
@@ -1260,7 +1262,7 @@ function lazyForward<T extends object>(build: () => T): T {
1260
1262
  }
1261
1263
 
1262
1264
  /** The production bridge singleton, lazily built on first property access. */
1263
- export const bridge: Bridge = lazyForward(() => productionInstance().bridge)`,ua=`/// The control-server coordinates the renderer needs: the loopback URL (absent until the
1265
+ export const bridge: Bridge = lazyForward(() => productionInstance().bridge)`,Pa=`/// The control-server coordinates the renderer needs: the loopback URL (absent until the
1264
1266
  /// sidecar reports ready) and the bearer token (always present, minted at shell startup).
1265
1267
  #[derive(serde::Serialize)]
1266
1268
  struct ControlInfo {
@@ -1279,19 +1281,19 @@ fn get_control_info(state: tauri::State<'_, daemon::DaemonHandle>) -> ControlInf
1279
1281
  }
1280
1282
  }
1281
1283
 
1282
- `,ma="//! Long-lived secret storage for the shell's two secrets: the app bearer token\n//! (set on sign-in, cleared on sign-out) and the engine's AES-256-GCM master key\n//! (created once on first run). Both ride the stdin handshake to the sidecar;\n//! neither is ever passed on argv or in the environment.\n//!\n//! Packaged (release) builds store both in the OS credential store (macOS\n//! Keychain, Windows Credential Manager, Linux Secret Service) under the app\n//! identifier as the service name (`tauri.conf.json`'s `identifier`, which the\n//! CLI and `sync-identity.mjs` rewrite on a rebrand, so rebranded apps never\n//! share entries), users `auth-token` and `engine-master-key`.",fa="//! Long-lived secret storage for the app bearer token (set on sign-in, cleared\n//! on sign-out). It is never passed on argv or in the environment.\n//!\n//! Packaged (release) builds store it in the OS credential store (macOS\n//! Keychain, Windows Credential Manager, Linux Secret Service) under the app\n//! identifier as the service name (`tauri.conf.json`'s `identifier`, which the\n//! CLI and `sync-identity.mjs` rewrite on a rebrand, so rebranded apps never\n//! share entries), user `auth-token`.";async function ga(e){let t=y(e,"apps/tauri/src/components/shell.tsx");await l(t,F(await $(t,"utf-8"),"components/shell.tsx"));let n=y(e,"apps/tauri/src/components/sidebar/app-sidebar.tsx"),r=F(await $(n,"utf-8"),"components/sidebar/app-sidebar.tsx");r=C(r,"import { useCallback, useMemo, useSyncExternalStore } from 'react'","import { useCallback, useMemo } from 'react'","app-sidebar useSyncExternalStore import"),await l(n,r);let i=y(e,"apps/tauri/src/config/sidebar.ts"),o=F(await $(i,"utf-8"),"config/sidebar.ts");o=C(o,`import {
1284
+ `,Ta="//! Long-lived secret storage for the shell's two secrets: the app bearer token\n//! (set on sign-in, cleared on sign-out) and the engine's AES-256-GCM master key\n//! (created once on first run). Both ride the stdin handshake to the sidecar;\n//! neither is ever passed on argv or in the environment.\n//!\n//! Packaged (release) builds store both in the OS credential store (macOS\n//! Keychain, Windows Credential Manager, Linux Secret Service) under the app\n//! identifier as the service name (`tauri.conf.json`'s `identifier`, which the\n//! CLI and `sync-identity.mjs` rewrite on a rebrand, so rebranded apps never\n//! share entries), users `auth-token` and `engine-master-key`.",Ra="//! Long-lived secret storage for the app bearer token (set on sign-in, cleared\n//! on sign-out). It is never passed on argv or in the environment.\n//!\n//! Packaged (release) builds store it in the OS credential store (macOS\n//! Keychain, Windows Credential Manager, Linux Secret Service) under the app\n//! identifier as the service name (`tauri.conf.json`'s `identifier`, which the\n//! CLI and `sync-identity.mjs` rewrite on a rebrand, so rebranded apps never\n//! share entries), user `auth-token`.";async function _a(e){let t=y(e,"apps/tauri/src/components/shell.tsx");await l(t,F(await j(t,"utf-8"),"components/shell.tsx"));let n=y(e,"apps/tauri/src/components/sidebar/app-sidebar.tsx"),r=F(await j(n,"utf-8"),"components/sidebar/app-sidebar.tsx");r=C(r,"import { useCallback, useMemo, useSyncExternalStore } from 'react'","import { useCallback, useMemo } from 'react'","app-sidebar useSyncExternalStore import"),await l(n,r);let i=y(e,"apps/tauri/src/config/sidebar.ts"),o=F(await j(i,"utf-8"),"config/sidebar.ts");o=C(o,`import {
1283
1285
  BuildingsIcon,
1284
1286
  GearIcon,
1285
1287
  HouseIcon,
1286
1288
  RobotIcon,
1287
1289
  UserCircleIcon
1288
- } from '@phosphor-icons/react'`,"import { BuildingsIcon, GearIcon, HouseIcon, UserCircleIcon } from '@phosphor-icons/react'","sidebar icon imports"),await l(i,o);let a=y(e,"apps/tauri/src/lib/config.ts"),s=F(await $(a,"utf-8"),"lib/config.ts");s=s.replace(/,(\n\} as const)/,"$1"),await l(a,s);let d=y(e,"apps/tauri/src/lib/sidebar-flags.ts");await l(d,F(await $(d,"utf-8"),"lib/sidebar-flags.ts"));let m=y(e,"apps/tauri/src/router.tsx"),p=F(await $(m,"utf-8"),"router.tsx");p=C(p,`import { clientConfig } from '@/lib/config'
1290
+ } from '@phosphor-icons/react'`,"import { BuildingsIcon, GearIcon, HouseIcon, UserCircleIcon } from '@phosphor-icons/react'","sidebar icon imports"),await l(i,o);let a=y(e,"apps/tauri/src/lib/config.ts"),s=F(await j(a,"utf-8"),"lib/config.ts");s=s.replace(/,(\n\} as const)/,"$1"),await l(a,s);let d=y(e,"apps/tauri/src/lib/sidebar-flags.ts");await l(d,F(await j(d,"utf-8"),"lib/sidebar-flags.ts"));let m=y(e,"apps/tauri/src/router.tsx"),p=F(await j(m,"utf-8"),"router.tsx");p=C(p,`import { clientConfig } from '@/lib/config'
1289
1291
  `,"","router clientConfig import"),p=C(p,` createRouter,
1290
1292
  redirect
1291
1293
  } from '@tanstack/react-router'`,` createRouter
1292
1294
  } from '@tanstack/react-router'`,"router redirect import specifier"),p=C(p,`import { AiHubScreen } from '@/screens/ai'
1293
1295
  `,"","router AiHubScreen import"),p=C(p,` ...(clientConfig.agentsEnabled ? [aiRoute, agentsRoute, schedulesRoute, integrationsRoute] : []),
1294
- `,"","router ai route spread"),await l(m,p);let f=y(e,"apps/tauri/src/lib/bridge/index.ts"),w=F(await $(f,"utf-8"),"lib/bridge/index.ts");w=C(w,`/**
1296
+ `,"","router ai route spread"),await l(m,p);let f=y(e,"apps/tauri/src/lib/bridge/index.ts"),S=F(await j(f,"utf-8"),"lib/bridge/index.ts");S=C(S,`/**
1295
1297
  * The complete public bridge: the app's full native + AI call surface, assembled from three transports
1296
1298
  * (engine HTTP, the event socket, native Tauri commands/plugins). The renderer imports \`bridge\` as a
1297
1299
  * module and derives its types from \`typeof bridge\`.
@@ -1299,8 +1301,8 @@ fn get_control_info(state: tauri::State<'_, daemon::DaemonHandle>) -> ControlInf
1299
1301
  export interface Bridge extends NativeBridgeParts {
1300
1302
  /** The AI tool-orchestration surface (present regardless of the feature flag). */
1301
1303
  ai: AiBridge
1302
- }`,"/**\n * The complete public bridge: the app's full native call surface (native Tauri commands + plugins). The\n * renderer imports `bridge` as a module and derives its types from `typeof bridge`.\n */\nexport type Bridge = NativeBridgeParts","bridge Bridge interface"),w=C(w,ca,la,"bridge createBridge factory"),w=C(w,pa,da,"bridge singleton tail"),await l(f,w);let b=y(e,"apps/tauri/src/lib/bridge/native.ts"),S=F(await $(b,"utf-8"),"lib/bridge/native.ts");S=C(S," /** Securely persists the Bearer token via the OS keychain, then syncs the running sidecar. */"," /** Securely persists the Bearer token via the OS keychain. */","native setToken jsdoc"),S=C(S," /** Removes the stored token (sign-out) and clears it on the running sidecar. */"," /** Removes the stored token (sign-out). */","native clearToken jsdoc"),S=C(S," Assembles the auth keyring\n * triplet (dual-writing the running sidecar on set/clear and registering the reconnect resync), the\n * guarded `openExternal`,"," Assembles the auth keyring\n * triplet, the guarded `openExternal`,","native createNativeBridge jsdoc"),await l(b,S);let J=y(e,"apps/tauri/tests/bridge/native.test.ts");await l(J,F(await $(J,"utf-8"),"tests/bridge/native.test.ts"));let V=y(e,"apps/tauri/src-tauri/src/lib.rs"),R=await $(V,"utf-8");R=C(R,`mod daemon;
1303
- `,"","lib.rs mod daemon"),R=C(R,ua,"","lib.rs get_control_info command"),R=C(R,` get_control_info,
1304
+ }`,"/**\n * The complete public bridge: the app's full native call surface (native Tauri commands + plugins). The\n * renderer imports `bridge` as a module and derives its types from `typeof bridge`.\n */\nexport type Bridge = NativeBridgeParts","bridge Bridge interface"),S=C(S,Sa,Ea,"bridge createBridge factory"),S=C(S,Aa,Ia,"bridge singleton tail"),await l(f,S);let b=y(e,"apps/tauri/src/lib/bridge/native.ts"),A=F(await j(b,"utf-8"),"lib/bridge/native.ts");A=C(A," /** Securely persists the Bearer token via the OS keychain, then syncs the running sidecar. */"," /** Securely persists the Bearer token via the OS keychain. */","native setToken jsdoc"),A=C(A," /** Removes the stored token (sign-out) and clears it on the running sidecar. */"," /** Removes the stored token (sign-out). */","native clearToken jsdoc"),A=C(A," Assembles the auth keyring\n * triplet (dual-writing the running sidecar on set/clear and registering the reconnect resync), the\n * guarded `openExternal`,"," Assembles the auth keyring\n * triplet, the guarded `openExternal`,","native createNativeBridge jsdoc"),await l(b,A);let W=y(e,"apps/tauri/tests/bridge/native.test.ts");await l(W,F(await j(W,"utf-8"),"tests/bridge/native.test.ts"));let V=y(e,"apps/tauri/src-tauri/src/lib.rs"),R=await j(V,"utf-8");R=C(R,`mod daemon;
1305
+ `,"","lib.rs mod daemon"),R=C(R,Pa,"","lib.rs get_control_info command"),R=C(R,` get_control_info,
1304
1306
  `,"","lib.rs get_control_info handler registration"),R=C(R,` let handle = app.handle().clone();
1305
1307
  `,"","lib.rs handle binding"),R=C(R,` if let Err(err) = daemon::init(&handle) {
1306
1308
  eprintln!("[shell] sidecar init failed: {err}");
@@ -1309,21 +1311,21 @@ export interface Bridge extends NativeBridgeParts {
1309
1311
  if let tauri::RunEvent::Exit = event {
1310
1312
  daemon::shutdown(app_handle);
1311
1313
  }
1312
- });`," .run(|_app_handle, _event| {});","lib.rs daemon::shutdown exit hook"),await l(V,R);let oe=y(e,"apps/tauri/src-tauri/src/keyring_store.rs"),B=await $(oe,"utf-8");B=C(B,ma,fa,"keyring_store module doc"),B=F(B,"src-tauri/src/keyring_store.rs"),await l(oe,B);let v=y(e,"apps/tauri/src-tauri/capabilities/default.json"),P=JSON.parse(await $(v,"utf-8")),O=P.permissions.length;if(P.permissions=P.permissions.filter(T=>T!=="dialog:default"),P.permissions.length===O)throw new Error("stripDesktopAi: expected the dialog:default capability in capabilities/default.json (boilerplate drift).");await l(v,JSON.stringify(P,null,2)+`
1313
- `);let z=y(e,"apps/tauri/src-tauri/tauri.conf.json"),I=JSON.parse(await $(z,"utf-8"));if(!I.bundle)throw new Error("stripDesktopAi: expected a bundle block in tauri.conf.json (boilerplate drift).");if(Ye(I.bundle,"externalBin","the tauri.conf bundle.externalBin key","stripDesktopAi"),Ye(I.bundle,"resources","the tauri.conf bundle.resources key","stripDesktopAi"),!I.build||I.build.beforeDevCommand!=="pnpm sidecar:stage && pnpm dev:vite")throw new Error("stripDesktopAi: expected the sidecar-staged beforeDevCommand in tauri.conf.json (boilerplate drift).");if(I.build.beforeBuildCommand!=="pnpm sidecar:stage && pnpm build:vite")throw new Error("stripDesktopAi: expected the sidecar-staged beforeBuildCommand in tauri.conf.json (boilerplate drift).");I.build.beforeDevCommand="node scripts/sync-identity.mjs && pnpm dev:vite",I.build.beforeBuildCommand="node scripts/sync-identity.mjs && pnpm build:vite",await l(z,JSON.stringify(I,null,2)+`
1314
- `)}import{readFile as ha}from"fs/promises";import{join as ya}from"path";var Br=`on:
1314
+ });`," .run(|_app_handle, _event| {});","lib.rs daemon::shutdown exit hook"),await l(V,R);let te=y(e,"apps/tauri/src-tauri/src/keyring_store.rs"),B=await j(te,"utf-8");B=C(B,Ta,Ra,"keyring_store module doc"),B=F(B,"src-tauri/src/keyring_store.rs"),await l(te,B);let v=y(e,"apps/tauri/src-tauri/capabilities/default.json"),P=JSON.parse(await j(v,"utf-8")),O=P.permissions.length;if(P.permissions=P.permissions.filter(w=>w!=="dialog:default"),P.permissions.length===O)throw new Error("stripDesktopAi: expected the dialog:default capability in capabilities/default.json (boilerplate drift).");await l(v,JSON.stringify(P,null,2)+`
1315
+ `);let Y=y(e,"apps/tauri/src-tauri/tauri.conf.json"),T=JSON.parse(await j(Y,"utf-8"));if(!T.bundle)throw new Error("stripDesktopAi: expected a bundle block in tauri.conf.json (boilerplate drift).");if(Ze(T.bundle,"externalBin","the tauri.conf bundle.externalBin key","stripDesktopAi"),Ze(T.bundle,"resources","the tauri.conf bundle.resources key","stripDesktopAi"),!T.build||T.build.beforeDevCommand!=="pnpm sidecar:stage && pnpm dev:vite")throw new Error("stripDesktopAi: expected the sidecar-staged beforeDevCommand in tauri.conf.json (boilerplate drift).");if(T.build.beforeBuildCommand!=="pnpm sidecar:stage && pnpm build:vite")throw new Error("stripDesktopAi: expected the sidecar-staged beforeBuildCommand in tauri.conf.json (boilerplate drift).");T.build.beforeDevCommand="node scripts/sync-identity.mjs && pnpm dev:vite",T.build.beforeBuildCommand="node scripts/sync-identity.mjs && pnpm build:vite",await l(Y,JSON.stringify(T,null,2)+`
1316
+ `)}import{readFile as Oa}from"fs/promises";import{join as xa}from"path";var Zr=`on:
1315
1317
  workflow_run:
1316
1318
  workflows: ["CI"]
1317
1319
  branches: [main]
1318
1320
  types: [completed]
1319
- workflow_dispatch:`,va=`on:
1321
+ workflow_dispatch:`,Ca=`on:
1320
1322
  # Automatic release on CI success is disabled for this project to conserve
1321
1323
  # GitHub Actions minutes. Re-enable by uncommenting the workflow_run trigger.
1322
1324
  # workflow_run:
1323
1325
  # workflows: ["CI"]
1324
1326
  # branches: [main]
1325
1327
  # types: [completed]
1326
- workflow_dispatch:`;async function Fr(e){if(!e.desktop||e.desktopAutoRelease)return;let t=ya(e.projectDir,".github/workflows/tauri-release.yml"),n=await ha(t,"utf8");if(!n.includes(Br))throw new Error(`Cannot make desktop releases manual: the expected workflow_run trigger block was not found in ${t}. The boilerplate workflow may have drifted.`);await l(t,n.replace(Br,va))}import{join as ba}from"path";async function Kr(e){let t=ka(e);await l(ba(e.projectDir,".github/workflows/ci.yml"),t)}function ka(e){let t=Y[e.databaseProvider].managed,n=e.cacheProvider==="upstash",r=e.frontend==="nuxt",i=t?"":` services:
1328
+ workflow_dispatch:`;async function Qr(e){if(!e.desktop||e.desktopAutoRelease)return;let t=xa(e.projectDir,".github/workflows/tauri-release.yml"),n=await Oa(t,"utf8");if(!n.includes(Zr))throw new Error(`Cannot make desktop releases manual: the expected workflow_run trigger block was not found in ${t}. The boilerplate workflow may have drifted.`);await l(t,n.replace(Zr,Ca))}import{join as Da}from"path";async function ei(e){let t=Na(e);await l(Da(e.projectDir,".github/workflows/ci.yml"),t)}function Na(e){let t=J[e.databaseProvider].managed,n=e.cacheProvider==="upstash",r=e.frontend==="nuxt",i=t?"":` services:
1327
1329
  postgres:
1328
1330
  image: postgres:18-alpine
1329
1331
  env:
@@ -1343,8 +1345,8 @@ export interface Bridge extends NativeBridgeParts {
1343
1345
  STRIPE_SECRET_KEY: test
1344
1346
  STRIPE_WEBHOOK_SECRET: test`;case"polar":return`
1345
1347
  POLAR_ACCESS_TOKEN: test
1346
- POLAR_WEBHOOK_SECRET: test`;case"none":return"";default:{let f=e.paymentProvider;throw new Error(`buildCiYaml: unhandled payment provider "${String(f)}"`)}}})(),d=e.socialProviders.map(f=>ae[f].envVars.map(w=>`
1347
- ${w.name}: test`).join("")).join("");return`# Deployment is handled by the hosting platform (Vercel, Coolify, etc.)
1348
+ POLAR_WEBHOOK_SECRET: test`;case"none":return"";default:{let f=e.paymentProvider;throw new Error(`buildCiYaml: unhandled payment provider "${String(f)}"`)}}})(),d=e.socialProviders.map(f=>se[f].envVars.map(S=>`
1349
+ ${S.name}: test`).join("")).join("");return`# Deployment is handled by the hosting platform (Vercel, Coolify, etc.)
1348
1350
  # which auto-deploys on push. CI runs in parallel as a quality gate.
1349
1351
  # For PR-based workflows, enable GitHub branch protection to require CI before merging.
1350
1352
 
@@ -1393,46 +1395,46 @@ ${r?` # vue-tsc on web-nuxt OOMs on the GitHub runner's default heap once
1393
1395
  run: echo "DATABASE_URL=${o}" > .env
1394
1396
 
1395
1397
  - run: pnpm test
1396
- `}import{readFile as Gr}from"fs/promises";import{existsSync as wa}from"fs";import{join as hn}from"path";var Hr="@repo/database";function Sa(e){return e?"pnpm -F @repo/database reset && pnpm -F @repo/database run deploy -- --push":"pnpm -F @repo/database run deploy"}function Ea(e,t){switch(e){case"fullstack":return t==="nextjs"?"web-next":"web-nuxt";case"separate":return"backend";default:{let n=e;throw new Error(`schemaOwnerApp: unhandled architecture "${String(n)}"`)}}}async function Aa(e,t,n){let r=await Gr(e,"utf-8"),i=JSON.parse(r),o=i.scripts?.[t];if(!o)throw new Error(`Cannot prepend to missing script "${t}" in ${e}`);o.includes(Hr)||(i.scripts={...i.scripts,[t]:`${n} && ${o}`},await l(e,JSON.stringify(i,null," ")+`
1397
- `))}async function Ia(e,t){let n=wa(e)?JSON.parse(await Gr(e,"utf-8")):{$schema:"https://openapi.vercel.sh/vercel.json"},r=n.buildCommand?.trim()||"pnpm build";r.includes(Hr)||(n.buildCommand=`${t} && ${r}`,await l(e,JSON.stringify(n,null," ")+`
1398
- `))}async function zr(e){let t=Sa(e.demo===!0),n=Ea(e.architecture,e.frontend),r=hn(e.projectDir,"apps",n);switch(e.deploymentTarget){case"node":await Aa(hn(r,"package.json"),"start",t);return;case"vercel":await Ia(hn(r,"vercel.json"),t);return;default:{let i=e.deploymentTarget;throw new Error(`generateDeployScripts: unhandled deployment target "${String(i)}"`)}}}import{readFile as Pa}from"fs/promises";import{existsSync as Ta}from"fs";import{join as Ut}from"path";var Ra=["stripe","polar"];async function Yr(e){let t=Ut(e.projectDir,"packages/payments/src"),n=e.paymentProvider,r=`// Active payment provider. To switch, change the path below to
1398
+ `}import{readFile as ti}from"fs/promises";import{existsSync as La}from"fs";import{join as kn}from"path";var ni="@repo/database";function $a(e){return e?"pnpm -F @repo/database reset && pnpm -F @repo/database run deploy -- --push":"pnpm -F @repo/database run deploy"}function ja(e,t){switch(e){case"fullstack":return t==="nextjs"?"web-next":"web-nuxt";case"separate":return"backend";default:{let n=e;throw new Error(`schemaOwnerApp: unhandled architecture "${String(n)}"`)}}}async function Ua(e,t,n){let r=await ti(e,"utf-8"),i=JSON.parse(r),o=i.scripts?.[t];if(!o)throw new Error(`Cannot prepend to missing script "${t}" in ${e}`);o.includes(ni)||(i.scripts={...i.scripts,[t]:`${n} && ${o}`},await l(e,JSON.stringify(i,null," ")+`
1399
+ `))}async function Ma(e,t){let n=La(e)?JSON.parse(await ti(e,"utf-8")):{$schema:"https://openapi.vercel.sh/vercel.json"},r=n.buildCommand?.trim()||"pnpm build";r.includes(ni)||(n.buildCommand=`${t} && ${r}`,await l(e,JSON.stringify(n,null," ")+`
1400
+ `))}async function ri(e){let t=$a(e.demo===!0),n=ja(e.architecture,e.frontend),r=kn(e.projectDir,"apps",n);switch(e.deploymentTarget){case"node":await Ua(kn(r,"package.json"),"start",t);return;case"vercel":await Ma(kn(r,"vercel.json"),t);return;default:{let i=e.deploymentTarget;throw new Error(`generateDeployScripts: unhandled deployment target "${String(i)}"`)}}}import{readFile as Va}from"fs/promises";import{existsSync as Ba}from"fs";import{join as Vt}from"path";var Fa=["stripe","polar"];async function ii(e){let t=Vt(e.projectDir,"packages/payments/src"),n=e.paymentProvider,r=`// Active payment provider. To switch, change the path below to
1399
1401
  // "./polar/index" or "./none/index" (other folders are kept in place).
1400
1402
  export { ops } from "./${n}/index";
1401
- `;await l(Ut(t,"providers/index.ts"),r),await l(Ut(t,"index.ts"),await _a(t,n))}async function _a(e,t){let n=Ut(e,"index.ts");if(!Ta(n))throw new Error(`generatePaymentBarrel: expected ${n} to exist - did packages/payments move?`);let r=await Pa(n,"utf-8"),i=Ra.filter(a=>a!==t);return r.split(`
1403
+ `;await l(Vt(t,"providers/index.ts"),r),await l(Vt(t,"index.ts"),await Ka(t,n))}async function Ka(e,t){let n=Vt(e,"index.ts");if(!Ba(n))throw new Error(`generatePaymentBarrel: expected ${n} to exist - did packages/payments move?`);let r=await Va(n,"utf-8"),i=Fa.filter(a=>a!==t);return r.split(`
1402
1404
  `).filter(a=>!i.some(s=>a.includes(`./providers/${s}/`))).join(`
1403
- `)}import{readdir as Oa,readFile as xa}from"fs/promises";import{join as qr}from"path";async function Jr(e){if(e.demo)return;let t=e.appName.trim()||e.projectName,n=JSON.stringify(t).slice(1,-1),r=qr(e.projectDir,"packages/i18n/translations"),i;try{i=await Oa(r)}catch{return}for(let o of i){let a=qr(r,o,"web.json"),s;try{s=await xa(a,"utf-8")}catch{continue}let d=s.replaceAll("GenerateSaaS",n);d!==s&&await l(a,d)}}import{readFile as Ca}from"fs/promises";import{join as Wr}from"path";var Da=[".nuxt/",".nuxt",".nitro/",".nitro",".output/",".output","_locales/"],Na=[".next/",".next",".svelte-kit/",".svelte-kit",".wrangler/",".wrangler",".dev.vars"];async function Zr(e){let n=e.frontend==="nuxt"?Na:Da;await Xr(Wr(e.projectDir,".gitignore"),n),await Xr(Wr(e.projectDir,".dockerignore"),n)}async function Xr(e,t){let n;try{n=await Ca(e,"utf-8")}catch{return}let r=new Set(t),i=n.split(`
1405
+ `)}import{readdir as Ga,readFile as Ha}from"fs/promises";import{join as oi}from"path";async function ai(e){if(e.demo)return;let t=e.appName.trim()||e.projectName,n=JSON.stringify(t).slice(1,-1),r=oi(e.projectDir,"packages/i18n/translations"),i;try{i=await Ga(r)}catch{return}for(let o of i){let a=oi(r,o,"web.json"),s;try{s=await Ha(a,"utf-8")}catch{continue}let d=s.replaceAll("GenerateSaaS",n);d!==s&&await l(a,d)}}import{readFile as za}from"fs/promises";import{join as si}from"path";var Ya=[".nuxt/",".nuxt",".nitro/",".nitro",".output/",".output","_locales/"],Ja=[".next/",".next",".svelte-kit/",".svelte-kit",".wrangler/",".wrangler",".dev.vars"];async function li(e){let n=e.frontend==="nuxt"?Ja:Ya;await ci(si(e.projectDir,".gitignore"),n),await ci(si(e.projectDir,".dockerignore"),n)}async function ci(e,t){let n;try{n=await za(e,"utf-8")}catch{return}let r=new Set(t),i=n.split(`
1404
1406
  `).filter(o=>!r.has(o.trim()));i.length!==n.split(`
1405
1407
  `).length&&await l(e,i.join(`
1406
- `))}async function Mt(e){let t=e.projectDir;e.demo||(await Xn(t),await Zn(t),await Qn(t),await er(t),e.desktop&&e.desktopAi&&await tr(t)),await nr(t,e.aiTools),await rr(t,e.frontend),await or(e),await ar(e),await sr(e),e.demo||await cr(e),await dr(e);let n=await ur(e);return await mr(e),await fr(e),await gr(e),await hr(e),await yr(e),await vr(e),await Sr(e),await Er(e),await Pr(e),await Rr(e),await Cr(e),await Kr(e),await Dr(e),await Nr(e),await Lr(e),await $r(e),await jr(e),await Ur(e),await Vr(e),await Mr(e),await Fr(e),await dn(e),await mn(e),await fn(e),await zr(e),await Yr(e),await Jr(e),await Zr(e),{dockerComposeGenerated:n}}import{basename as ei,join as ti,relative as $a}from"path";import{createHash as Qr}from"crypto";import{readFile as La}from"fs/promises";async function Vt(e){let t=await La(e);return Qr("sha256").update(t).digest("hex")}function yn(e){return Qr("sha256").update(e).digest("hex")}var ja=new Set(["data",W]);function Ua(e){let t=e.split("/");for(let n of t)if(Qt.has(n)||en.has(n)||ja.has(n)||n.startsWith(".env")&&!n.includes("example"))return!0;return!1}function ni(e,t){return{projectName:e.projectName??ei(t),appName:e.appName??e.projectName??ei(t),projectDir:t,frontend:e.frontend==="nextjs"?"nextjs":"nuxt",architecture:e.architecture??"fullstack",paymentProvider:e.paymentProvider??"none",emailProvider:e.emailProvider??"smtp",multiTenancy:e.multiTenancy??!1,billingScope:e.billingScope??"user",blog:e.blog??!1,docs:e.docs??!1,desktop:e.desktop??!1,desktopAutoRelease:e.desktopAutoRelease??!0,desktopAi:e.desktopAi??!1,ai:e.ai??!1,rag:e.rag??!1,companion:e.companion??!1,mcpServer:e.mcpServer??!1,aiByok:e.aiByok??!0,revenueSharing:e.revenueSharing??!1,credits:e.credits??!1,dockerServices:e.dockerServices??[],aiTools:e.aiTools??[],socialProviders:e.socialProviders??[],defaultCurrency:e.defaultCurrency??"USD",deploymentTarget:e.deploymentTarget??"node",databaseProvider:e.databaseProvider??"postgres",cacheProvider:e.cacheProvider??"redis",version:e.version,baseUrl:e.baseUrl,credentials:{},demo:!1}}function Ma(e,t){return{version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",appName:e.appName,projectName:e.projectName,frontend:e.frontend,architecture:e.architecture,paymentProvider:e.paymentProvider,emailProvider:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,desktopAutoRelease:e.desktopAutoRelease,desktopAi:e.desktopAi,ai:e.ai,rag:e.rag,companion:e.companion,mcpServer:e.mcpServer,aiByok:e.aiByok,credits:e.credits,revenueSharing:e.revenueSharing,defaultCurrency:e.defaultCurrency,dockerServices:e.dockerServices,socialProviders:e.socialProviders,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,aiTools:e.aiTools,...e.baseUrl?{baseUrl:e.baseUrl}:{},...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}}}async function ri(e,t){let r=(await Pe(e.projectDir,e.projectDir,Ua)).sort(),i=await Promise.all(r.map(async s=>[Ie($a(e.projectDir,s)),await Vt(s)])),o=Object.fromEntries(i),a=Ma(e,t);await l(ti(e.projectDir,fe),JSON.stringify(a,null," ")+`
1407
- `),await l(ti(e.projectDir,Vn),JSON.stringify(o,null," ")+`
1408
- `)}import{relative as Va}from"path";async function We(e){let n=(await Pe(e,e,Be)).sort(),r=await Promise.all(n.map(async i=>[Ie(Va(e,i)),await Vt(i)]));return Object.fromEntries(r)}import{copyFile as Ba,mkdir as Fa,rm as Ka}from"fs/promises";import{dirname as Ga,join as ii,relative as Ha}from"path";import{existsSync as za}from"fs";async function vn(e,t){za(t)&&await Ka(t,{recursive:!0,force:!0});let n=await Pe(e,e,Be);for(let r of n){let i=Ie(Ha(e,r)),o=ii(t,i);await Fa(Ga(o),{recursive:!0}),await Ba(r,o)}}async function oi(e,t){await vn(e,ii(t,St))}import{existsSync as Ya}from"fs";import{readFile as ai,readdir as qa}from"fs/promises";import{join as ie,dirname as Ja,resolve as Wa,sep as Xa}from"path";import{fileURLToPath as Za}from"url";var pt={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},Vd=Object.values(pt),bn="generatesaas-update",si=Ja(Za(import.meta.url));function Qa(){let e=ie(si,"skill","content");return Ya(e)?e:ie(si,"content")}function kn(e){return!e||e.length===0?[]:e.map(t=>pt[t])}async function wn(e,t,n,r){let i=kn(r);for(let o of i){let a=ie(e,o,bn),s=ie(a,"scripts"),d=ie(a,"references");await Rt(s),await Rt(d),await l(ie(a,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",o)),await l(ie(d,".gitkeep"),"");for(let[m,p]of Object.entries(n)){let f=Wa(s,m);f.startsWith(s+Xa)&&await l(f,p)}}}async function ci(e,t){let n=Qa(),r=await ai(ie(n,"SKILL.md"),"utf-8"),i=ie(n,"scripts"),o=await qa(i),a={};for(let s of o)s!==".gitkeep"&&(a[s]=await ai(ie(i,s),"utf-8"));await wn(e,r,a,t)}import{execFile as es,execFileSync as ts}from"child_process";import{access as li,readFile as ns}from"fs/promises";import{join as Sn}from"path";import*as j from"@clack/prompts";function _e(e){try{let t=process.platform==="win32"?"where":"which";return ts(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function Re(e,t,n,r=3e5){return new Promise((i,o)=>{es(e,t,{cwd:n,timeout:r,maxBuffer:50*1024*1024},(a,s,d)=>{if(a){let m=String(s||"").trim(),f=[String(d||"").trim(),m].filter(Boolean).join(`
1408
+ `))}async function Bt(e){let t=e.projectDir;e.demo||(await ar(t),await sr(t),await cr(t),await lr(t),e.desktop&&e.desktopAi&&await pr(t)),await dr(t,e.aiTools),await ur(t,e.frontend),await fr(e),await gr(e),await vr(e),await hr(e),e.demo||await br(e),await Sr(e);let n=await Er(e);return await Ar(e),await Ir(e),await Pr(e),await Tr(e),await Rr(e),await _r(e),await Dr(e),await Nr(e),await jr(e),await Mr(e),await Kr(e),await ei(e),await Gr(e),await Hr(e),await zr(e),await Yr(e),await Jr(e),await qr(e),await Xr(e),await Wr(e),await Qr(e),await fn(e),await hn(e),await yn(e),await ri(e),await ii(e),await ai(e),await li(e),{dockerComposeGenerated:n}}import{basename as di,join as ui,relative as Wa}from"path";import{createHash as pi}from"crypto";import{readFile as qa}from"fs/promises";async function Ft(e){let t=await qa(e);return pi("sha256").update(t).digest("hex")}function wn(e){return pi("sha256").update(e).digest("hex")}var Xa=new Set(["data",z]);function Za(e){let t=e.split("/");for(let n of t)if(tn.has(n)||nn.has(n)||Xa.has(n)||n.startsWith(".env")&&!n.includes("example"))return!0;return!1}function mi(e,t){return{projectName:e.projectName??di(t),appName:e.appName??e.projectName??di(t),projectDir:t,frontend:e.frontend==="nextjs"?"nextjs":"nuxt",architecture:e.architecture??"fullstack",paymentProvider:e.paymentProvider??"none",emailProvider:e.emailProvider??"smtp",multiTenancy:e.multiTenancy??!1,billingScope:e.billingScope??"user",blog:e.blog??!1,docs:e.docs??!1,desktop:e.desktop??!1,desktopAutoRelease:e.desktopAutoRelease??!0,desktopAi:e.desktopAi??!1,ai:e.ai??!1,rag:e.rag??!1,companion:e.companion??!1,companionName:e.companionName??Ie(e.projectName),mcpServer:e.mcpServer??!1,aiByok:e.aiByok??!0,revenueSharing:e.revenueSharing??!1,credits:e.credits??!1,dockerServices:e.dockerServices??[],aiTools:e.aiTools??[],socialProviders:e.socialProviders??[],defaultCurrency:e.defaultCurrency??"USD",deploymentTarget:e.deploymentTarget??"node",databaseProvider:e.databaseProvider??"postgres",cacheProvider:e.cacheProvider??"redis",version:e.version,baseUrl:e.baseUrl,credentials:{},demo:!1}}function Qa(e,t){return{version:e.version,initialVersion:e.version,repo:"Duzbee/GenerateSaaS",appName:e.appName,projectName:e.projectName,frontend:e.frontend,architecture:e.architecture,paymentProvider:e.paymentProvider,emailProvider:e.emailProvider,multiTenancy:e.multiTenancy,billingScope:e.billingScope,blog:e.blog,docs:e.docs,desktop:e.desktop,desktopAutoRelease:e.desktopAutoRelease,desktopAi:e.desktopAi,ai:e.ai,rag:e.rag,companion:e.companion,mcpServer:e.mcpServer,...e.companionName?{companionName:e.companionName}:{},aiByok:e.aiByok,credits:e.credits,revenueSharing:e.revenueSharing,defaultCurrency:e.defaultCurrency,dockerServices:e.dockerServices,socialProviders:e.socialProviders,deploymentTarget:e.deploymentTarget,databaseProvider:e.databaseProvider,cacheProvider:e.cacheProvider,aiTools:e.aiTools,...e.baseUrl?{baseUrl:e.baseUrl}:{},...t&&{licenseToken:t.token,licenseKeyHash:t.keyHash,installId:t.installId}}}async function fi(e,t){let r=(await _e(e.projectDir,e.projectDir,Za)).sort(),i=await Promise.all(r.map(async s=>[Re(Wa(e.projectDir,s)),await Ft(s)])),o=Object.fromEntries(i),a=Qa(e,t);await l(ui(e.projectDir,ge),JSON.stringify(a,null," ")+`
1409
+ `),await l(ui(e.projectDir,qn),JSON.stringify(o,null," ")+`
1410
+ `)}import{relative as es}from"path";async function xe(e){let n=(await _e(e,e,ze)).sort(),r=await Promise.all(n.map(async i=>[Re(es(e,i)),await Ft(i)]));return Object.fromEntries(r)}import{copyFile as ts,mkdir as ns,rm as rs}from"fs/promises";import{dirname as is,join as gi,relative as os}from"path";import{existsSync as as}from"fs";async function Sn(e,t){as(t)&&await rs(t,{recursive:!0,force:!0});let n=await _e(e,e,ze);for(let r of n){let i=Re(os(e,r)),o=gi(t,i);await ns(is(o),{recursive:!0}),await ts(r,o)}}async function hi(e,t){await Sn(e,gi(t,Pt))}import{existsSync as ss}from"fs";import{readFile as yi,readdir as cs}from"fs/promises";import{join as ae,dirname as ls,resolve as ps,sep as ds}from"path";import{fileURLToPath as us}from"url";var ft={"claude-code":".claude/skills",cursor:".cursor/skills",codex:".agents/skills","gemini-cli":".gemini/skills",windsurf:".windsurf/skills"},yu=Object.values(ft),En="generatesaas-update",vi=ls(us(import.meta.url));function ms(){let e=ae(vi,"skill","content");return ss(e)?e:ae(vi,"content")}function An(e){return!e||e.length===0?[]:e.map(t=>ft[t])}async function In(e,t,n,r){let i=An(r);for(let o of i){let a=ae(e,o,En),s=ae(a,"scripts"),d=ae(a,"references");await Ct(s),await Ct(d),await l(ae(a,"SKILL.md"),t.replaceAll("__SKILL_ROOT__",o)),await l(ae(d,".gitkeep"),"");for(let[m,p]of Object.entries(n)){let f=ps(s,m);f.startsWith(s+ds)&&await l(f,p)}}}async function bi(e,t){let n=ms(),r=await yi(ae(n,"SKILL.md"),"utf-8"),i=ae(n,"scripts"),o=await cs(i),a={};for(let s of o)s!==".gitkeep"&&(a[s]=await yi(ae(i,s),"utf-8"));await In(e,r,a,t)}import{execFile as fs,execFileSync as gs}from"child_process";import{access as ki,readFile as hs}from"fs/promises";import{join as Pn}from"path";import*as U from"@clack/prompts";function De(e){try{let t=process.platform==="win32"?"where":"which";return gs(t,[e],{stdio:"ignore"}),!0}catch{return!1}}function Ce(e,t,n,r=3e5){return new Promise((i,o)=>{fs(e,t,{cwd:n,timeout:r,maxBuffer:50*1024*1024},(a,s,d)=>{if(a){let m=String(s||"").trim(),f=[String(d||"").trim(),m].filter(Boolean).join(`
1409
1411
  `);o(new Error(f?`${a.message}
1410
- ${f}`:a.message))}else i()})})}async function pi(e){if(!_e("pnpm"))return j.log.warn("pnpm not found. Skipping lockfile regeneration."),!1;try{return await Re("pnpm",["install","--lockfile-only","--no-frozen-lockfile","--config.minimumReleaseAge=0"],e),!0}catch(t){let n=t instanceof Error?t.message:String(t);return j.log.warn(`Lockfile regeneration failed: ${n}`),j.log.warn("Deploys using --frozen-lockfile may fail."),!1}}async function di(e){if(!_e("pnpm"))return j.log.warn("pnpm not found. Skipping dependency installation."),j.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=j.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await Re("pnpm",["install","--config.minimumReleaseAge=0"],e),t.stop("Dependencies installed."),!0}catch(n){t.stop("Dependency installation failed.");let r=n instanceof Error?n.message:String(n);return j.log.warn(`pnpm install failed: ${r}`),j.log.warn("You can run it manually later."),!1}}async function ui(e){if(!_e("pnpm"))return!1;let t=j.spinner();t.start("Generating baseline database migration...");try{return await Re("pnpm",["-F","@repo/database","generate"],e),t.stop("Baseline migration generated."),!0}catch(n){t.stop("Baseline migration generation failed.");let r=n instanceof Error?n.message:String(n);return j.log.warn(`Could not generate baseline migration: ${r}`),j.log.warn("Run 'pnpm -F @repo/database generate' before your first deploy."),!1}}async function mi(e){try{return await li(Sn(e,".git")),j.log.info("Git repository already exists, skipping init."),!0}catch{}if(!_e("git"))return j.log.warn("git not found. Skipping repository initialization."),!1;let t=j.spinner();t.start("Initializing git repository...");try{return await Re("git",["init"],e),await Re("git",["add","-A"],e),await Re("git",["commit","--no-verify","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),j.log.warn("You can run git init manually later."),!1}}async function fi(e){if(!_e("pnpm"))return!1;try{await li(Sn(e,".git"))}catch{return!1}try{let t=JSON.parse(await ns(Sn(e,"package.json"),"utf-8")),n=!!t.devDependencies?.["simple-git-hooks"],r=!!t["simple-git-hooks"];if(!n||!r)return!1}catch{return!1}try{return await Re("pnpm",["exec","simple-git-hooks"],e),!0}catch{return j.log.warn("Could not install git hooks. Run 'pnpm exec simple-git-hooks' manually."),!1}}import*as Xe from"@clack/prompts";import X from"picocolors";function gi(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&Xe.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let n=[];if(n.push(`cd ${e.projectDir}`),t.pnpmInstalled||n.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(a=>Ce[a].label).join(", ");n.push(`pnpm infra ${X.dim(`# ${o}`)}`)}if(n.push(`pnpm dev ${X.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(n.push(""),n.push(X.dim("Fill in remaining TODO values in .env"))),Xe.note(n.join(`
1411
- `),X.yellow("Start Development")),t.dockerComposeGenerated){let o=[];o.push(`App ${X.cyan("http://localhost:3000")}`),e.architecture==="separate"&&o.push(`API ${X.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&o.push(`Mailpit ${X.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&o.push(`Inngest ${X.cyan("http://localhost:8288")}`),Xe.note(o.join(`
1412
- `),X.yellow("Dev Tools"))}let r=[],i=rs(e);i.length>0&&r.push(`Set in production: ${X.dim(i.join(", "))}`),r.push("pnpm db:setup # Apply the database schema"),r.push(is(e)),Xe.note(r.join(`
1413
- `),X.yellow("Deployment"))}function rs(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function is(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy # Deploy to Vercel"}}import ps from"picocolors";var ds="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";async function us(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(`generatesaas-demo:${e}`)),n=[...new Uint8Array(t).subarray(0,16)].map(r=>r.toString(16).padStart(2,"0")).join("");return`${n.slice(0,8)}-${n.slice(8,12)}-${n.slice(12,16)}-${n.slice(16,20)}-${n.slice(20,32)}`}function ms(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function hi(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new Z("--frontend <type>","frontend framework").choices([...Se])).addOption(new Z("--architecture <type>","fullstack or separate").choices([...De])).addOption(new Z("--payment <provider>","payment provider").choices([...Ne])).addOption(new Z("--email <provider>","email provider").choices([...Le])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new Z("--billing-scope <scope>","billing scope (requires --org)").choices([...Ue])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--desktop","include the desktop app (apps/tauri, built with Tauri)").option("--no-desktop","exclude the desktop app").option("--desktop-auto","auto-trigger the desktop release workflow on CI success (default: manual-only)").option("--no-desktop-auto","manual-only desktop releases (workflow_dispatch)").option("--desktop-ai","include the desktop AI orchestration layer (requires --desktop)").option("--no-desktop-ai","exclude the desktop AI orchestration layer").option("--ai","include the AI features (chat, models, schedules, integrations); unlocks the companion + MCP server").option("--no-ai","exclude the AI features").option("--rag","include the server-side knowledge base (keyword search over your knowledge/ docs)").option("--no-rag","exclude the server-side knowledge base").option("--companion","include the backend companion feature (pairing, HTTP transport, Companions UI) for the universal OpenCompanion daemon your users install").option("--no-companion","exclude the backend companion feature").option("--mcp-server","include the outward MCP server (the /mcp route + Better Auth mcp() provider)").option("--no-mcp-server","exclude the outward MCP server").option("--ai-byok","AI BYOK mode: end-users bring their own provider key (default)").option("--no-ai-byok","operator-keyed, credit-metered AI platform mode").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new Z("--currency <code>","default currency for billing").choices([...se])).addOption(new Z("--deploy <target>","deployment target").choices([...ce])).addOption(new Z("--database <provider>","database provider").choices([...le])).addOption(new Z("--cache <provider>","cache provider").choices([...pe])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new Z("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new Z("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,n)=>{await fs(t?{...n,apiKey:t}:n)})}async function fs(e){let t=performance.now();Cn("1.22.0");let n,r;try{n=jn(e),r=ms(e.templateVersion)}catch(v){A.cancel(L(v)),process.exit(1)}let i=A.spinner(),o;try{o=await Ve({apiKey:e.apiKey,prompt:!e.yes})}catch(v){A.cancel(L(v)),process.exit(1)}e.demo&&yn(o)!==ds&&(A.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let a=me(o),s=async()=>{let v=await ye(a),P=v.latest,O=r??P;if(r&&!v.versions.some(z=>z.version===O))throw new Error(`Template version "${r}" is not available.`);return{latestVersion:P,selectedVersion:O,desktopAllowed:v.entitlements?.desktopAllowed??!0}};i.start("Verifying access...");let d,m,p=!0;try{({latestVersion:d,selectedVersion:m,desktopAllowed:p}=await s()),i.stop("Access verified."),Ae(o)}catch(v){if(i.stop("Access verification failed."),v instanceof M&&v.status===401){e.yes&&(A.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),A.log.warning("Invalid API key."),o=await st(),a=me(o),i.start("Verifying access...");try{({latestVersion:d,selectedVersion:m,desktopAllowed:p}=await s()),i.stop("Access verified."),Ae(o)}catch(P){i.stop("Access verification failed."),A.cancel(P instanceof M&&P.status===401?"Invalid API key.":L(P)),process.exit(1)}}else A.cancel(L(v)),process.exit(1)}A.log.success(`Latest version: ${d}`),m!==d&&A.log.success(`Using template version: ${m}`),n.desktop===!0&&!p&&(A.cancel("The desktop app is available on the Pro plan and up. Upgrade your plan at generatesaas.com."),process.exit(1));let f;e.yes?f=Un(p?n:{...n,desktop:!1}):f=await Mn(n,{desktopAllowed:p});let w;i.start("Activating license...");try{let v=e.demo&&f.baseUrl?await us(f.baseUrl):crypto.randomUUID(),P=()=>({frontend:f.frontend,version:m,installId:v,projectName:f.projectName,options:Gn(f)}),O;try{O=await Xt(a,P())}catch(z){let I=Et(z);if(!I?.lastAllowedVersion)throw z;i.stop("License activation failed."),e.yes&&(A.cancel(`${I.message} Re-run with --template-version ${I.lastAllowedVersion}.`),process.exit(1));let T=await A.confirm({message:`Your update window has ended. Continue with v${I.lastAllowedVersion} (the last version your license covers)?`});(A.isCancel(T)||!T)&&(A.cancel("Setup cancelled."),process.exit(0)),m=I.lastAllowedVersion,i.start(`Activating license for v${m}...`),O=await Xt(a,P())}w={token:O.token,keyHash:yn(o),installId:O.installId??v},i.stop("License activated.")}catch(v){i.stop("License activation failed."),A.cancel(L(v)),process.exit(1)}let b=ls(f.projectDir);if(os(b)&&as(b).length>0)if(e.yes)A.log.info(`Directory ${b} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let P=await A.select({message:`Directory ${b} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(A.isCancel(P)||P==="cancel")&&(A.cancel("Setup cancelled."),process.exit(0)),P==="overwrite"&&ss(b,{recursive:!0,force:!0})}let S={...f,projectDir:b,version:m,...e.demo?{docs:!1}:{}};i.start("Downloading template...");try{await At(a,m,b),i.stop("Template downloaded.")}catch(v){i.stop("Download failed."),A.cancel(L(v)),process.exit(1)}let J;i.start("Generating project files...");try{if({dockerComposeGenerated:J}=await Mt(S),!e.demo){let v=await We(b);await l(cs(b,wt),JSON.stringify(v,null," ")+`
1414
- `),await oi(b,b)}await ci(b,S.aiTools),await ri(S,w),i.stop("Project files generated.")}catch(v){i.stop("Generation failed."),A.cancel(L(v)),process.exit(1)}await pi(b);let V=await di(b);V&&S.demo!==!0&&e.dbMigration!==!1&&await ui(b),await mi(b),V&&await fi(b);let R=_e("docker"),B=Jt(S).map(v=>v.key).filter(v=>!S.credentials?.[v]);gi(S,{pnpmInstalled:V,dockerComposeGenerated:J,dockerAvailable:R,skippedCredentials:B}),Dn(),A.log.info(ps.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as wi}from"fs";import{readFile as Si}from"fs/promises";import{join as dt,resolve as ks}from"path";import*as U from"@clack/prompts";import Ze from"picocolors";import{mkdtemp as gs,rm as hs}from"fs/promises";import{tmpdir as ys}from"os";import{join as vs}from"path";async function En(e,t,n,r){let i=await gs(vs(ys(),"generatesaas-stage-"));try{await At(e,t,i),await Mt({...n,projectDir:i}),await vn(i,r)}finally{await hs(i,{recursive:!0,force:!0})}}var yi=[{key:"frontend",label:"Frontend framework",hint:"Nuxt (Vue) or Next.js (React).",category:"Project",kind:"enum",default:"nuxt",choices:Se,adoptable:!1,impact:"structural"},{key:"architecture",label:"Architecture",hint:"Fullstack (frontend hosts the API) or a standalone Hono backend.",category:"Infrastructure",kind:"enum",default:"fullstack",choices:De,adoptable:!1,impact:"structural"},{key:"deploymentTarget",label:"Deployment target",hint:"Node.js / Docker or Vercel serverless.",category:"Infrastructure",kind:"enum",default:"node",choices:ce,adoptable:!1,impact:"config"},{key:"databaseProvider",label:"Database provider",hint:"Self-hosted PostgreSQL, Neon, or Supabase.",category:"Infrastructure",kind:"enum",default:"postgres",choices:le,adoptable:!1,impact:"config"},{key:"cacheProvider",label:"Cache provider",hint:"Self-hosted Redis or Upstash.",category:"Infrastructure",kind:"enum",default:"redis",choices:pe,adoptable:!1,impact:"config"},{key:"paymentProvider",label:"Payment provider",hint:"Stripe, Polar, or none.",category:"Features",kind:"enum",default:"none",choices:Ne,adoptable:!1,impact:"structural"},{key:"defaultCurrency",label:"Default currency",hint:"Billing and pricing currency.",category:"Features",kind:"enum",default:"USD",choices:se,adoptable:!1,impact:"config"},{key:"emailProvider",label:"Email provider",hint:"SMTP, Amazon SES, or Resend.",category:"Features",kind:"enum",default:"smtp",choices:Le,adoptable:!1,impact:"config"},{key:"multiTenancy",label:"Multi-tenancy (organizations)",hint:"Adds organizations - teams, members, and shared resources.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"billingScope",label:"Billing scope",hint:"Whether subscriptions belong to a user or an organization.",category:"Features",kind:"enum",default:"user",choices:Ue,adoptable:!1,impact:"config",requires:e=>e.multiTenancy===!0,requiresLabel:"requires multi-tenancy"},{key:"blog",label:"Blog",hint:"Adds the marketing blog (content collection, list and post pages).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"docs",label:"Docs app",hint:"Adds the self-hosted Fumadocs documentation site (apps/docs).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktop",label:"Desktop app",hint:"Adds the cross-platform desktop app (apps/tauri, built with Tauri).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural"},{key:"desktopAutoRelease",label:"Desktop auto-release",hint:"Release the desktop app on every CI success (vs manual-only).",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"desktopAi",label:"Desktop AI orchestration",hint:"Adds the desktop AI agents layer (requires the desktop app).",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.desktop===!0,requiresLabel:"requires the desktop app"},{key:"ai",label:"AI features",hint:"Adds the AI surface (chat, models, schedules, integrations) and unlocks the companion, MCP server, knowledge base, and BYOK options. Off keeps config.ai.enabled false so the AI nav stays hidden.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"rag",label:"Server-side knowledge base",hint:"Adds a keyword knowledge base over your `knowledge/` docs.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"companion",label:"Companion daemon",hint:"Adds the backend companion feature (pairing, stateless-HTTP transport, Companions UI) for the universal OpenCompanion daemon your users install to drive their subscription CLIs. Works on any deployment.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"mcpServer",label:"Outward MCP server",hint:"Exposes the app's capability layer to external agents as an authenticated MCP OAuth server.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"structural",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"aiByok",label:"AI billing mode (BYOK)",hint:"BYOK: end-users bring their own provider key, no credit metering. Off: operator-keyed, credit-metered platform mode.",category:"Features",kind:"boolean",default:!0,adoptable:!1,impact:"config",requires:e=>e.ai===!0,requiresLabel:"requires AI features"},{key:"credits",label:"Metered credits",hint:"Adds metered usage credits on top of subscription plans.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config",requires:e=>e.paymentProvider!==void 0&&e.paymentProvider!=="none",requiresLabel:"requires a payment provider"},{key:"revenueSharing",label:"Revenue sharing",hint:"Opt-in MRR leaderboard with dofollow backlinks.",category:"Features",kind:"boolean",default:!1,adoptable:!0,impact:"config"},{key:"socialProviders",label:"Social login providers",hint:"Which social sign-in buttons the auth screen shows.",category:"Features",kind:"multiselect",default:[],choices:Me,adoptable:!1,impact:"config"},{key:"dockerServices",label:"Docker services",hint:"Local services scaffolded in docker-compose.",category:"Tooling",kind:"multiselect",default:[],choices:$e,adoptable:!1,impact:"config"},{key:"aiTools",label:"AI coding tools",hint:"Which AI assistants receive the bundled skill files.",category:"Tooling",kind:"multiselect",default:[],choices:je,adoptable:!1,impact:"config"}];function bs(e,t){return e[t]!==void 0}function vi(e){return yi.filter(t=>t.adoptable&&!bs(e,t.key)&&(t.requires?t.requires(e):!0)).map(t=>({key:t.key,label:t.label,hint:t.hint,kind:t.kind,default:t.default,...t.choices?{choices:t.choices}:{},impact:t.impact,...t.requiresLabel?{requiresLabel:t.requiresLabel}:{}}))}function bi(e){let t={};for(let n of yi)t[n.key]=Array.isArray(n.default)?[...n.default]:n.default;return{...t,...e}}function ki(e){let n=(e.startsWith("v")?e.slice(1):e).match(/^(\d+)\.(\d+)\.(\d+)$/);return n?[Number(n[1]),Number(n[2]),Number(n[3])]:null}function Bt(e,t){let n=ki(e),r=ki(t);if(!n||!r)return 0;for(let i=0;i<3;i++)if(n[i]!==r[i])return n[i]-r[i];return 0}function Ei(e){e.command("update").description("Update AI skill files and stage template updates").argument("[mode]","pass 'auto' to mark the staged update for unattended apply by your AI assistant").option("--cwd <path>","project directory (default: current directory)").action(async(t,n)=>{let r=t==="auto"?"auto":void 0,i=ks(n.cwd??process.cwd()),o=dt(i,fe),a;try{a=JSON.parse(await Si(o,"utf-8"))}catch{U.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let s;try{s=await Ve()}catch(p){U.cancel(L(p)),process.exit(1)}let d=me(s),m=U.spinner();try{m.start("Verifying access...");let p;try{p=await ye(d)}catch(T){throw T instanceof M&&T.status===401?new Error("Your saved API key was rejected. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):T}m.stop("Access verified."),Ae(s),m.start("Fetching latest skill files...");let f=await Kn(d,p.latest);await wn(i,f.skillMd,f.scripts,a.aiTools);let w=kn(a.aiTools);if(m.stop("Skills updated."),U.log.success(`Skill files installed to ${Ze.cyan(w.length.toString())} locations.`),a.version===p.latest){U.log.info(`Already on the latest version (${a.version}).`);return}let b=JSON.stringify(a);$n(a);let S=vi(a),J=bi(a),V=JSON.stringify(J)!==b;if(a=J,a.licenseToken)try{let T=await Hn(d,{currentToken:a.licenseToken,newVersion:p.latest});a.licenseToken=T.token,T.licenseKeyHash&&(a.licenseKeyHash=T.licenseKeyHash),await l(o,JSON.stringify(a,null," ")+`
1415
- `),V=!1,U.log.success("License refreshed.")}catch(T){let be=Et(T);be&&(U.cancel(be.message),process.exit(1)),U.log.warn("License refresh skipped.")}V&&await l(o,JSON.stringify(a,null," ")+`
1416
- `);let R=ni(a,i),oe=dt(i,Bn);m.start(`Staging v${p.latest} (shaped for your config)...`),await En(d,p.latest,R,oe),m.stop("Template staged.");let{text:B,title:v}=await ws(d,p,a.version);B&&U.note(B,v);let P=dt(i,wt),O=dt(i,St),z=!wi(O),I=!wi(P);if(z){if(m.start("Building baseline template (one-time migration)..."),await En(d,a.version,R,O),I){let T=await We(O);await l(P,JSON.stringify(T,null," ")+`
1417
- `)}if(m.stop("Baseline template stored."),!I){let T=await Ss(P,O);T>0&&U.log.warn(`Rebuilt baseline differs from the original for ${T} file(s) (the CLI's shaping evolved since this project was scaffolded). Classification still follows the committed template-hashes.json; upstream diffs for those files may include unrelated noise.`)}}else if(I){m.start("Computing baseline template hashes...");let T=await We(O);await l(P,JSON.stringify(T,null," ")+`
1418
- `),m.stop("Baseline hashes computed.")}if(await l(dt(i,Fn),JSON.stringify({currentVersion:a.version,targetVersion:p.latest,changelog:B,stagedAt:new Date().toISOString(),...S.length>0?{newOptions:S}:{},...r?{mode:r}:{}},null," ")+`
1419
- `),U.log.info(`Update staged: ${Ze.cyan(a.version)} \u2192 ${Ze.cyan(p.latest)}`),a.aiTools&&a.aiTools.length>0){let T=a.aiTools[0],be=nt[T].label;U.log.info(`Open your project in ${Ze.cyan(be)} and ask: ${Ze.cyan("'update my GenerateSaaS project'")}`)}else U.log.info(`Ask your AI coding assistant to ${Ze.cyan("'update my GenerateSaaS project'")}.`)}catch(p){m.stop("Failed."),U.cancel(`Update failed: ${L(p)}`),process.exit(1)}})}async function ws(e,t,n){let r=t.latest,i=t.versions.filter(a=>Bt(a.version,n)>0&&Bt(a.version,r)<=0).sort((a,s)=>Bt(a.version,s.version));if(i.length<=1)return{text:await Wt(e,r),title:`Changelog v${r}`};let o=[];for(let a of i){let s=null;try{s=await Wt(e,a.version)}catch{s=null}let d=a.date?` (${a.date.slice(0,10)})`:"",m=a.breaking?" [BREAKING]":"";o.push(`# v${a.version}${d}${m}
1412
+ ${f}`:a.message))}else i()})})}async function wi(e){if(!De("pnpm"))return U.log.warn("pnpm not found. Skipping lockfile regeneration."),!1;try{return await Ce("pnpm",["install","--lockfile-only","--no-frozen-lockfile","--config.minimumReleaseAge=0"],e),!0}catch(t){let n=t instanceof Error?t.message:String(t);return U.log.warn(`Lockfile regeneration failed: ${n}`),U.log.warn("Deploys using --frozen-lockfile may fail."),!1}}async function Si(e){if(!De("pnpm"))return U.log.warn("pnpm not found. Skipping dependency installation."),U.log.info("Install pnpm: https://pnpm.io/installation"),!1;let t=U.spinner();t.start("Installing dependencies (this may take a minute)...");try{return await Ce("pnpm",["install","--config.minimumReleaseAge=0"],e),t.stop("Dependencies installed."),!0}catch(n){t.stop("Dependency installation failed.");let r=n instanceof Error?n.message:String(n);return U.log.warn(`pnpm install failed: ${r}`),U.log.warn("You can run it manually later."),!1}}async function Ei(e){if(!De("pnpm"))return!1;let t=U.spinner();t.start("Generating baseline database migration...");try{return await Ce("pnpm",["-F","@repo/database","generate"],e),t.stop("Baseline migration generated."),!0}catch(n){t.stop("Baseline migration generation failed.");let r=n instanceof Error?n.message:String(n);return U.log.warn(`Could not generate baseline migration: ${r}`),U.log.warn("Run 'pnpm -F @repo/database generate' before your first deploy."),!1}}async function Ai(e){try{return await ki(Pn(e,".git")),U.log.info("Git repository already exists, skipping init."),!0}catch{}if(!De("git"))return U.log.warn("git not found. Skipping repository initialization."),!1;let t=U.spinner();t.start("Initializing git repository...");try{return await Ce("git",["init"],e),await Ce("git",["add","-A"],e),await Ce("git",["commit","--no-verify","-m","Initial commit from GenerateSaaS"],e),t.stop("Git repository initialized."),!0}catch{return t.stop("Git initialization failed."),U.log.warn("You can run git init manually later."),!1}}async function Ii(e){if(!De("pnpm"))return!1;try{await ki(Pn(e,".git"))}catch{return!1}try{let t=JSON.parse(await hs(Pn(e,"package.json"),"utf-8")),n=!!t.devDependencies?.["simple-git-hooks"],r=!!t["simple-git-hooks"];if(!n||!r)return!1}catch{return!1}try{return await Ce("pnpm",["exec","simple-git-hooks"],e),!0}catch{return U.log.warn("Could not install git hooks. Run 'pnpm exec simple-git-hooks' manually."),!1}}import*as Qe from"@clack/prompts";import X from"picocolors";function Pi(e,t){t.dockerComposeGenerated&&!t.dockerAvailable&&Qe.log.warn("Docker not found. Install Docker to run local services: https://docs.docker.com/get-docker/");let n=[];if(n.push(`cd ${e.projectDir}`),t.pnpmInstalled||n.push("pnpm install"),t.dockerComposeGenerated){let o=e.dockerServices.map(a=>$e[a].label).join(", ");n.push(`pnpm infra ${X.dim(`# ${o}`)}`)}if(n.push(`pnpm dev ${X.dim("# http://localhost:3000")}`),t.skippedCredentials.length>0&&(n.push(""),n.push(X.dim("Fill in remaining TODO values in .env"))),Qe.note(n.join(`
1413
+ `),X.yellow("Start Development")),t.dockerComposeGenerated){let o=[];o.push(`App ${X.cyan("http://localhost:3000")}`),e.architecture==="separate"&&o.push(`API ${X.cyan("http://localhost:3010")}`),e.dockerServices.includes("mailpit")&&o.push(`Mailpit ${X.cyan("http://localhost:8025")}`),e.dockerServices.includes("inngest")&&o.push(`Inngest ${X.cyan("http://localhost:8288")}`),Qe.note(o.join(`
1414
+ `),X.yellow("Dev Tools"))}let r=[],i=ys(e);i.length>0&&r.push(`Set in production: ${X.dim(i.join(", "))}`),r.push("pnpm db:setup # Apply the database schema"),r.push(vs(e)),Qe.note(r.join(`
1415
+ `),X.yellow("Deployment"))}function ys(e){let t=["DATABASE_URL","BETTER_AUTH_SECRET"];return e.cacheProvider==="upstash"?t.push("UPSTASH_REDIS_REST_URL","UPSTASH_REDIS_REST_TOKEN"):t.push("REDIS_URL"),e.paymentProvider==="stripe"?t.push("STRIPE_SECRET_KEY","STRIPE_WEBHOOK_SECRET"):e.paymentProvider==="polar"&&t.push("POLAR_ACCESS_TOKEN","POLAR_WEBHOOK_SECRET"),e.emailProvider==="ses"?t.push("AMAZON_SES_REGION","AMAZON_SES_KEY","AMAZON_SES_SECRET"):e.emailProvider==="resend"?t.push("RESEND_API_KEY"):t.push("SMTP_HOST","SMTP_PORT"),t}function vs(e){switch(e.deploymentTarget){case"node":return"Deploy with Docker or your preferred Node.js host";case"vercel":return"vercel deploy # Deploy to Vercel"}}import As from"picocolors";var Is="a10a6fb9d7cadde32e37dad52059d17b5d2b916b08c76d8fbcc99982e9a3d87f";async function Ps(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(`generatesaas-demo:${e}`)),n=[...new Uint8Array(t).subarray(0,16)].map(r=>r.toString(16).padStart(2,"0")).join("");return`${n.slice(0,8)}-${n.slice(8,12)}-${n.slice(12,16)}-${n.slice(16,20)}-${n.slice(20,32)}`}function Ts(e){if(e===void 0)return;let t=e.trim().replace(/^v/,"");if(!/^\d+\.\d+\.\d+$/.test(t))throw new Error(`Invalid template version "${e}". Use semver like 1.2.3.`);return t}function Ti(e){e.command("init").description("Scaffold a new GenerateSaaS project").argument("[apiKey]","license key (same as --api-key)").option("-n, --name <name>","project name (lowercase, hyphens, starts with letter)").option("--app-name <name>","display name for the app").option("-l, --location <path>","project directory (default: ./{name})").addOption(new Z("--frontend <type>","frontend framework").choices([...Ae])).addOption(new Z("--architecture <type>","fullstack or separate").choices([...je])).addOption(new Z("--payment <provider>","payment provider").choices([...Ue])).addOption(new Z("--email <provider>","email provider").choices([...Me])).option("--org","enable multi-tenancy (organizations)").option("--no-org","disable multi-tenancy").addOption(new Z("--billing-scope <scope>","billing scope (requires --org)").choices([...Fe])).option("--blog","enable blog").option("--no-blog","disable blog").option("--docs","include the docs app (apps/docs, Fumadocs)").option("--no-docs","exclude the docs app").option("--desktop","include the desktop app (apps/tauri, built with Tauri)").option("--no-desktop","exclude the desktop app").option("--desktop-auto","auto-trigger the desktop release workflow on CI success (default: manual-only)").option("--no-desktop-auto","manual-only desktop releases (workflow_dispatch)").option("--desktop-ai","include the desktop AI orchestration layer (requires --desktop)").option("--no-desktop-ai","exclude the desktop AI orchestration layer").option("--ai","include the AI features (chat, models, schedules, integrations); unlocks the companion + MCP server").option("--no-ai","exclude the AI features").option("--rag","include the server-side knowledge base (keyword search over your knowledge/ docs)").option("--no-rag","exclude the server-side knowledge base").option("--companion","include the backend companion feature (pairing, HTTP transport, Companions UI) for the universal OpenCompanion daemon your users install").option("--no-companion","exclude the backend companion feature").option("--mcp-server","include the outward MCP server (the /mcp route + Better Auth mcp() provider)").option("--no-mcp-server","exclude the outward MCP server").option("--ai-byok","AI BYOK mode: end-users bring their own provider key (default)").option("--no-ai-byok","operator-keyed, credit-metered AI platform mode").option("--revenue-sharing","enable revenue sharing").option("--no-revenue-sharing","disable revenue sharing").option("--credits","enable credits system").option("--no-credits","disable credits system (subscription-only)").option("--docker <services>","comma-separated: postgres,redis,inngest,mailpit").option("--ai-tools <tools>","comma-separated: claude-code,cursor,codex,gemini-cli,windsurf").option("--social-providers <providers>","comma-separated: google,github,facebook,discord,x").addOption(new Z("--currency <code>","default currency for billing").choices([...ce])).addOption(new Z("--deploy <target>","deployment target").choices([...le])).addOption(new Z("--database <provider>","database provider").choices([...pe])).addOption(new Z("--cache <provider>","cache provider").choices([...de])).option("--template-version <version>","specific template version to scaffold").option("--api-key <key>","API key (skips interactive prompt)").option("--base-url <url>","public base URL (e.g. https://example.com) - bakes into canonical/og/sitemap").option("-y, --yes","accept defaults for unspecified options (non-interactive)").addOption(new Z("--demo","first-party demo build: keep sample content, mark site non-indexable - requires CI API key").hideHelp()).addOption(new Z("--no-db-migration","skip generating the baseline DB migration (internal: demos/CI/playground)").hideHelp()).action(async(t,n)=>{await Rs(t?{...n,apiKey:t}:n)})}async function Rs(e){let t=performance.now();Un("1.23.0");let n,r;try{n=zn(e),r=Ts(e.templateVersion)}catch(v){I.cancel(N(v)),process.exit(1)}let i=I.spinner(),o;try{o=await He({apiKey:e.apiKey,prompt:!e.yes})}catch(v){I.cancel(N(v)),process.exit(1)}e.demo&&wn(o)!==Is&&(I.cancel("--demo is restricted to first-party demo deployments."),process.exit(1));let a=fe(o),s=async()=>{let v=await ve(a),P=v.latest,O=r??P;if(r&&!v.versions.some(Y=>Y.version===O))throw new Error(`Template version "${r}" is not available.`);return{latestVersion:P,selectedVersion:O,desktopAllowed:v.entitlements?.desktopAllowed??!0}};i.start("Verifying access...");let d,m,p=!0;try{({latestVersion:d,selectedVersion:m,desktopAllowed:p}=await s()),i.stop("Access verified."),Te(o)}catch(v){if(i.stop("Access verification failed."),v instanceof M&&v.status===401){e.yes&&(I.cancel("Invalid API key. Cannot prompt in non-interactive mode."),process.exit(1)),I.log.warning("Invalid API key."),o=await lt(),a=fe(o),i.start("Verifying access...");try{({latestVersion:d,selectedVersion:m,desktopAllowed:p}=await s()),i.stop("Access verified."),Te(o)}catch(P){i.stop("Access verification failed."),I.cancel(P instanceof M&&P.status===401?"Invalid API key.":N(P)),process.exit(1)}}else I.cancel(N(v)),process.exit(1)}I.log.success(`Latest version: ${d}`),m!==d&&I.log.success(`Using template version: ${m}`),n.desktop===!0&&!p&&(I.cancel("The desktop app is available on the Pro plan and up. Upgrade your plan at generatesaas.com."),process.exit(1));let f;e.yes?f=Yn(p?n:{...n,desktop:!1}):f=await Jn(n,{desktopAllowed:p});let S;i.start("Activating license...");try{let v=e.demo&&f.baseUrl?await Ps(f.baseUrl):crypto.randomUUID(),P=()=>({frontend:f.frontend,version:m,installId:v,projectName:f.projectName,options:Qn(f)}),O;try{O=await Qt(a,P())}catch(Y){let T=Tt(Y);if(!T?.lastAllowedVersion)throw Y;i.stop("License activation failed."),e.yes&&(I.cancel(`${T.message} Re-run with --template-version ${T.lastAllowedVersion}.`),process.exit(1));let w=await I.confirm({message:`Your update window has ended. Continue with v${T.lastAllowedVersion} (the last version your license covers)?`});(I.isCancel(w)||!w)&&(I.cancel("Setup cancelled."),process.exit(0)),m=T.lastAllowedVersion,i.start(`Activating license for v${m}...`),O=await Qt(a,P())}S={token:O.token,keyHash:wn(o),installId:O.installId??v},i.stop("License activated.")}catch(v){i.stop("License activation failed."),I.cancel(N(v)),process.exit(1)}let b=Es(f.projectDir);if(bs(b)&&ks(b).length>0)if(e.yes)I.log.info(`Directory ${b} is not empty. Merging (keeping existing files, overwriting conflicts).`);else{let P=await I.select({message:`Directory ${b} is not empty.`,options:[{value:"merge",label:"Merge",hint:"keep existing files, overwrite conflicts"},{value:"overwrite",label:"Overwrite",hint:"delete everything and start fresh"},{value:"cancel",label:"Cancel"}]});(I.isCancel(P)||P==="cancel")&&(I.cancel("Setup cancelled."),process.exit(0)),P==="overwrite"&&ws(b,{recursive:!0,force:!0})}let A={...f,projectDir:b,version:m,...e.demo?{docs:!1}:{}};i.start("Downloading template...");try{await Rt(a,m,b),i.stop("Template downloaded.")}catch(v){i.stop("Download failed."),I.cancel(N(v)),process.exit(1)}let W;i.start("Generating project files...");try{if({dockerComposeGenerated:W}=await Bt(A),!e.demo){let v=await xe(b);await l(Ss(b,It),JSON.stringify(v,null," ")+`
1416
+ `),await hi(b,b)}await bi(b,A.aiTools),await fi(A,S),i.stop("Project files generated.")}catch(v){i.stop("Generation failed."),I.cancel(N(v)),process.exit(1)}await wi(b);let V=await Si(b);V&&A.demo!==!0&&e.dbMigration!==!1&&await Ei(b),await Ai(b),V&&await Ii(b);let R=De("docker"),B=Xt(A).map(v=>v.key).filter(v=>!A.credentials?.[v]);Pi(A,{pnpmInstalled:V,dockerComposeGenerated:W,dockerAvailable:R,skippedCredentials:B}),Mn(),I.log.info(As.dim(`Done in ${((performance.now()-t)/1e3).toFixed(1)}s`))}import{existsSync as Ci}from"fs";import{readFile as Rn}from"fs/promises";import{join as gt,resolve as $s}from"path";import*as D from"@clack/prompts";import et from"picocolors";import{mkdtemp as _s,rm as Os}from"fs/promises";import{tmpdir as xs}from"os";import{join as Cs}from"path";async function Tn(e,t,n,r){let i=await _s(Cs(xs(),"generatesaas-stage-"));try{await Rt(e,t,i),await Bt({...n,projectDir:i}),await Sn(i,r)}finally{await Os(i,{recursive:!0,force:!0})}}function Ri(e){let n=(e.startsWith("v")?e.slice(1):e).match(/^(\d+)\.(\d+)\.(\d+)$/);return n?[Number(n[1]),Number(n[2]),Number(n[3])]:null}function Kt(e,t){let n=Ri(e),r=Ri(t);if(!n||!r)return 0;for(let i=0;i<3;i++)if(n[i]!==r[i])return n[i]-r[i];return 0}import{readFile as Ds}from"fs/promises";import{join as _i}from"path";var Ns=_i(z,"companion-release.json"),Ls=["apps/companion/","packages/companion-protocol/","packages/agent-core-types/","packages/agent-core/","scripts/companion-export/"];async function Oi(e){let t;try{t=await Ds(_i(e,Ns),"utf-8")}catch(r){if(typeof r=="object"&&r!==null&&"code"in r&&r.code==="ENOENT")return null;throw r}let n=JSON.parse(t);return typeof n=="object"&&n!==null&&"version"in n&&typeof n.version=="string"&&n.version.length>0?{version:n.version}:null}function xi(e){return e.some(t=>Ls.some(n=>t.startsWith(n)))}function Di(e){e.command("update").description("Update AI skill files and stage template updates").argument("[mode]","pass 'auto' to mark the staged update for unattended apply by your AI assistant").option("--cwd <path>","project directory (default: current directory)").action(async(t,n)=>{let r=t==="auto"?"auto":void 0,i=$s(n.cwd??process.cwd()),o=gt(i,ge),a;try{a=JSON.parse(await Rn(o,"utf-8"))}catch{D.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let s;try{s=await He()}catch(p){D.cancel(N(p)),process.exit(1)}let d=fe(s),m=D.spinner();try{m.start("Verifying access...");let p;try{p=await ve(d)}catch(w){throw w instanceof M&&w.status===401?new Error("Your saved API key was rejected. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):w}m.stop("Access verified."),Te(s),m.start("Fetching latest skill files...");let f=await Zn(d,p.latest);await In(i,f.skillMd,f.scripts,a.aiTools);let S=An(a.aiTools);if(m.stop("Skills updated."),D.log.success(`Skill files installed to ${et.cyan(S.length.toString())} locations.`),a.version===p.latest){D.log.info(`Already on the latest version (${a.version}).`);return}let b=JSON.stringify(a);Hn(a);let A=Fn(a),W=Kn(a),V=JSON.stringify(W)!==b;if(a=W,a.licenseToken)try{let w=await er(d,{currentToken:a.licenseToken,newVersion:p.latest});a.licenseToken=w.token,w.licenseKeyHash&&(a.licenseKeyHash=w.licenseKeyHash),await l(o,JSON.stringify(a,null," ")+`
1417
+ `),V=!1,D.log.success("License refreshed.")}catch(w){let ne=Tt(w);ne&&(D.cancel(ne.message),process.exit(1)),D.log.warn("License refresh skipped.")}V&&await l(o,JSON.stringify(a,null," ")+`
1418
+ `);let R=mi(a,i),te=gt(i,Wn);m.start(`Staging v${p.latest} (shaped for your config)...`),await Tn(d,p.latest,R,te),m.stop("Template staged.");let{text:B,title:v}=await js(d,p,a.version);B&&D.note(B,v);let P=gt(i,It),O=gt(i,Pt),Y=!Ci(O),T=!Ci(P);if(Y){if(m.start("Building baseline template (one-time migration)..."),await Tn(d,a.version,R,O),T){let w=await xe(O);await l(P,JSON.stringify(w,null," ")+`
1419
+ `)}if(m.stop("Baseline template stored."),!T){let w=await Ms(P,O);w>0&&D.log.warn(`Rebuilt baseline differs from the original for ${w} file(s) (the CLI's shaping evolved since this project was scaffolded). Classification still follows the committed template-hashes.json; upstream diffs for those files may include unrelated noise.`)}}else if(T){m.start("Computing baseline template hashes...");let w=await xe(O);await l(P,JSON.stringify(w,null," ")+`
1420
+ `),m.stop("Baseline hashes computed.")}if(await l(gt(i,Xn),JSON.stringify({currentVersion:a.version,targetVersion:p.latest,changelog:B,stagedAt:new Date().toISOString(),...A.length>0?{newOptions:A}:{},...r?{mode:r}:{}},null," ")+`
1421
+ `),D.log.info(`Update staged: ${et.cyan(a.version)} \u2192 ${et.cyan(p.latest)}`),a.aiTools&&a.aiTools.length>0){let w=a.aiTools[0],ne=it[w].label;D.log.info(`Open your project in ${et.cyan(ne)} and ask: ${et.cyan("'update my GenerateSaaS project'")}`)}else D.log.info(`Ask your AI coding assistant to ${et.cyan("'update my GenerateSaaS project'")}.`);if(a.companion===!0)try{let w=await Oi(i);if(w){let ne=await Us(P,te);xi(ne)&&D.log.warn(`Companion: vendored daemon changed since your published v${w.version} - run pnpm companion:publish (your users auto-update once tagged)`)}}catch(w){D.log.warn(`Companion re-release check skipped: ${N(w)}`)}}catch(p){m.stop("Failed."),D.cancel(`Update failed: ${N(p)}`),process.exit(1)}})}async function js(e,t,n){let r=t.latest,i=t.versions.filter(a=>Kt(a.version,n)>0&&Kt(a.version,r)<=0).sort((a,s)=>Kt(a.version,s.version));if(i.length<=1)return{text:await Zt(e,r),title:`Changelog v${r}`};let o=[];for(let a of i){let s=null;try{s=await Zt(e,a.version)}catch{s=null}let d=a.date?` (${a.date.slice(0,10)})`:"",m=a.breaking?" [BREAKING]":"";o.push(`# v${a.version}${d}${m}
1420
1422
 
1421
1423
  ${s??"_No changelog available for this release._"}`)}return{text:o.join(`
1422
1424
 
1423
- `),title:`Changelog v${n} \u2192 v${r}`}}async function Ss(e,t){let n=JSON.parse(await Si(e,"utf-8")),r=await We(t),i=0;for(let[o,a]of Object.entries(n))Be(o)||r[o]!==a&&i++;for(let o of Object.keys(r))o in n||i++;return i}import*as q from"@clack/prompts";import Q from"picocolors";import{readFile as Es}from"fs/promises";import{join as As,resolve as Is}from"path";function Ai(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let n=Is(t.cwd??process.cwd()),r=As(n,fe),i;try{i=JSON.parse(await Es(r,"utf-8"))}catch{q.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o=[`Version: ${Q.cyan(i.version)}`,`Frontend: ${Q.cyan(i.frontend)}`,i.deploymentTarget?`Deploy target: ${Q.cyan(i.deploymentTarget)}`:null,i.databaseProvider?`Database: ${Q.cyan(i.databaseProvider)}`:null,i.cacheProvider?`Cache: ${Q.cyan(i.cacheProvider)}`:null,i.aiTools&&i.aiTools.length>0?`AI tools: ${Q.cyan(i.aiTools.join(", "))}`:null].filter(Boolean).join(`
1424
- `);q.note(o,Q.bold("Project Status"));let a=q.spinner();a.start("Checking for updates...");try{let s=await Ve(),d=me(s),p=(await ye(d)).latest;i.version===p?(a.stop("Up to date."),q.log.success(`Already on the latest version (${Q.green(p)})`)):(a.stop("Update available."),q.log.warning(`Update available: ${Q.yellow(i.version)} \u2192 ${Q.green(p)}`),q.log.info(`Open this project in your AI coding agent and ask it to ${Q.cyan("update my GenerateSaaS project")} - it fetches and applies the update for you.`))}catch(s){a.stop("Check failed."),s instanceof M&&s.status===401?q.log.warning("Invalid API key. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):q.log.warning(`Could not check for updates: ${L(s)}`)}})}import{readFile as Ps}from"fs/promises";import*as N from"@clack/prompts";import D from"picocolors";function Ts(){return process.env.GENERATESAAS_API_KEY??at()}function Rs(e){return{verdict:e.verdict,plan:e.license?.plan??e.domainInstalls.find(t=>t.ownerPlan)?.ownerPlan??null,mismatchDomain:e.install?.domain??null,ejectedAt:e.install?.ejectedAt??e.domainInstalls.find(t=>t.ejectedAt)?.ejectedAt??null}}function _s(e){return{verdict:e.verdict??"unknown",ejectedAt:e.ejectedAt??null}}function Os(e){switch(e.verdict){case"licensed":return N.log.success(`${D.green("LICENSED")} - resolves to an account with an active${e.plan?` ${e.plan}`:""} license.`),!0;case"ejected":return N.log.success(`${D.green("EJECTED")} - a licensed buyer opted this install out of telemetry${e.ejectedAt?` on ${e.ejectedAt.slice(0,10)}`:""}. The site is legitimate.`),!0;case"revoked":return N.log.error(`${D.red("REVOKED")} - the owning account no longer holds a plan (refund or chargeback). This deployment is no longer licensed.`),!1;case"token_domain_mismatch":return N.log.error(`${D.red("LEAKED TOKEN")} - this license belongs to a different deployment${e.mismatchDomain?` (${D.cyan(e.mismatchDomain)})`:""}, not this site. The token was copied from a licensed project.`),!1;case"no_license_history":return N.log.error(`${D.red("NO LICENSE HISTORY")} - no license has ever been associated with this site. If it runs GenerateSaaS, treat it as unlicensed.`),!1;default:return N.log.warn(`${D.yellow("UNKNOWN")} - could not cross-reference the records right now. Try again shortly.`),!1}}async function Ii(e,t){let n=process.env.GENERATESAAS_API_URL??ot,r=Ts();e.start("Cross-referencing license records...");try{let i=r?Rs(await zn(n,r,{lkh:t.lkh,nid:t.nid,domain:t.domain})):_s(await Zt(n,{token:t.token,domain:t.domain}));return e.stop(`${D.green("Checked")} - records cross-referenced`),Os(i)}catch(i){return e.stop(`${D.yellow("Skipped")} - ${L(i)}`),null}}function xs(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let n=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(n)}function An(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function Pi(e){N.note([`License ID: ${D.cyan(String(e.lid??"unknown"))}`,`Version: ${D.cyan(String(e.ver??"unknown"))}`,`Init version: ${String(e.iver??"unknown")}`,`Frontend: ${String(e.fe??"unknown")}`,`Created: ${An(e.pat)}`,`Last updated: ${An(e.uat)}`,`Expires: ${An(e.exp)}`,`Install ID: ${String(e.nid??"unknown")}`].join(`
1425
- `),D.yellow("License Details"))}function Cs(e){let n=(/^https?:\/\//i.test(e)?e:`https://${e}`).replace(/\/+$/,"");if(n.endsWith("/api"))return[`${n}/license`];try{if(new URL(n).pathname!=="/")return[`${n}/license`]}catch{return[`${n}/license`]}return[`${n}/api/license`,`${n}/license`]}async function Ti(e){let t=N.spinner(),n=null,r="no candidates";for(let a of Cs(e)){t.start(`Checking ${a}...`);try{let s=await fetch(a);if(!s.ok){r=`${a} returned ${s.status}`,t.stop(`${D.yellow("Not here")} - ${r}`);continue}let d=(await s.text()).trim();if(!d||d.split(".").length!==3){r=`${a} did not return a JWT`,t.stop(`${D.yellow("Not here")} - ${r}`);continue}n=d,t.stop(`${D.green("Found")} - license endpoint responded`);break}catch(s){r=`${a}: ${L(s)}`,t.stop(`${D.yellow("Unreachable")} - ${r}`)}}if(n===null){N.log.warn(`No license endpoint found (last: ${r}). The site may be ejected, not a GenerateSaaS app, or serving its API elsewhere.`);let a=Ri(e);return a?await Ii(t,{domain:a})??!1:!1}let i;try{i=xs(n)}catch{return N.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let a=process.env.GENERATESAAS_API_URL??ot,s=await Zt(a,{token:n});if(s.valid)t.stop(`${D.green("Valid")} - signature verified`);else return t.stop(`${D.red("Invalid")} - ${s.reason}`),!1}catch{return t.stop(`${D.yellow("Skipped")} - could not reach verification service`),N.log.warn("Signature not verified. Displaying unverified claims:"),Pi(i),!1}return Pi(i),await Ii(t,{token:n,lkh:typeof i.lkh=="string"?i.lkh:void 0,nid:typeof i.nid=="string"?i.nid:void 0,domain:Ri(e)})??!0}function Ri(e){try{return new URL(/^https?:\/\//i.test(e)?e:`https://${e}`).hostname}catch{return}}function _i(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com or https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,n)=>{if(!t&&!n.file&&(N.cancel("Provide a URL or --file <path>."),process.exit(1)),n.file){let i=(await Ps(n.file,"utf-8")).split(`
1426
- `).map(a=>a.trim()).filter(a=>a&&!a.startsWith("#"));i.length===0&&(N.cancel("No URLs found in file."),process.exit(1));let o=0;for(let a of i)await Ti(a)&&o++,N.log.info("");N.log.success(`${o}/${i.length} sites verified.`)}else await Ti(t)||process.exit(1)})}import{existsSync as Ds,rmSync as Ns}from"fs";import*as ee from"@clack/prompts";function Oi(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Ds(ue)?(Ns(ue),ee.log.success("API key removed.")):ee.log.info("No API key configured.");return}let n=at();n?ee.log.info(`Current API key: ****${n.slice(-4)}`):ee.log.info("No API key configured.");let r=await st(),i=me(r),o=ee.spinner();o.start("Verifying API key...");try{await ye(i),o.stop("API key verified."),Ae(r),ee.log.success("API key saved.")}catch(a){o.stop("Verification failed."),a instanceof M&&a.status===401?ee.cancel("Invalid API key."):ee.cancel(L(a)),process.exit(1)}})}import{existsSync as Ft,rmSync as Ls,readFileSync as Pn,writeFileSync as xi}from"fs";import{join as Oe}from"path";import*as K from"@clack/prompts";var $s=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/cron-spread.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],js=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat";
1425
+ `),title:`Changelog v${n} \u2192 v${r}`}}async function Us(e,t){let n=JSON.parse(await Rn(e,"utf-8")),r=await xe(t),i=[];for(let[o,a]of Object.entries(r))n[o]!==a&&i.push(o);for(let o of Object.keys(n))o in r||i.push(o);return i}async function Ms(e,t){let n=JSON.parse(await Rn(e,"utf-8")),r=await xe(t),i=0;for(let[o,a]of Object.entries(n))ze(o)||r[o]!==a&&i++;for(let o of Object.keys(r))o in n||i++;return i}import*as q from"@clack/prompts";import Q from"picocolors";import{readFile as Vs}from"fs/promises";import{join as Bs,resolve as Fs}from"path";function Ni(e){e.command("status").description("Show project status and check for updates").option("--cwd <path>","project directory (default: current directory)").action(async t=>{let n=Fs(t.cwd??process.cwd()),r=Bs(n,ge),i;try{i=JSON.parse(await Vs(r,"utf-8"))}catch{q.cancel(".generatesaas/manifest.json not found. Run this from a GenerateSaaS project."),process.exit(1)}let o=[`Version: ${Q.cyan(i.version)}`,`Frontend: ${Q.cyan(i.frontend)}`,i.deploymentTarget?`Deploy target: ${Q.cyan(i.deploymentTarget)}`:null,i.databaseProvider?`Database: ${Q.cyan(i.databaseProvider)}`:null,i.cacheProvider?`Cache: ${Q.cyan(i.cacheProvider)}`:null,i.aiTools&&i.aiTools.length>0?`AI tools: ${Q.cyan(i.aiTools.join(", "))}`:null].filter(Boolean).join(`
1426
+ `);q.note(o,Q.bold("Project Status"));let a=q.spinner();a.start("Checking for updates...");try{let s=await He(),d=fe(s),p=(await ve(d)).latest;i.version===p?(a.stop("Up to date."),q.log.success(`Already on the latest version (${Q.green(p)})`)):(a.stop("Update available."),q.log.warning(`Update available: ${Q.yellow(i.version)} \u2192 ${Q.green(p)}`),q.log.info(`Open this project in your AI coding agent and ask it to ${Q.cyan("update my GenerateSaaS project")} - it fetches and applies the update for you.`))}catch(s){a.stop("Check failed."),s instanceof M&&s.status===401?q.log.warning("Invalid API key. Run `generatesaas auth` to update it, or set GENERATESAAS_API_KEY."):q.log.warning(`Could not check for updates: ${N(s)}`)}})}import{readFile as Ks}from"fs/promises";import*as $ from"@clack/prompts";import L from"picocolors";function Gs(){return process.env.GENERATESAAS_API_KEY??ct()}function Hs(e){return{verdict:e.verdict,plan:e.license?.plan??e.domainInstalls.find(t=>t.ownerPlan)?.ownerPlan??null,mismatchDomain:e.install?.domain??null,ejectedAt:e.install?.ejectedAt??e.domainInstalls.find(t=>t.ejectedAt)?.ejectedAt??null}}function zs(e){return{verdict:e.verdict??"unknown",ejectedAt:e.ejectedAt??null}}function Ys(e){switch(e.verdict){case"licensed":return $.log.success(`${L.green("LICENSED")} - resolves to an account with an active${e.plan?` ${e.plan}`:""} license.`),!0;case"ejected":return $.log.success(`${L.green("EJECTED")} - a licensed buyer opted this install out of telemetry${e.ejectedAt?` on ${e.ejectedAt.slice(0,10)}`:""}. The site is legitimate.`),!0;case"revoked":return $.log.error(`${L.red("REVOKED")} - the owning account no longer holds a plan (refund or chargeback). This deployment is no longer licensed.`),!1;case"token_domain_mismatch":return $.log.error(`${L.red("LEAKED TOKEN")} - this license belongs to a different deployment${e.mismatchDomain?` (${L.cyan(e.mismatchDomain)})`:""}, not this site. The token was copied from a licensed project.`),!1;case"no_license_history":return $.log.error(`${L.red("NO LICENSE HISTORY")} - no license has ever been associated with this site. If it runs GenerateSaaS, treat it as unlicensed.`),!1;default:return $.log.warn(`${L.yellow("UNKNOWN")} - could not cross-reference the records right now. Try again shortly.`),!1}}async function Li(e,t){let n=process.env.GENERATESAAS_API_URL??st,r=Gs();e.start("Cross-referencing license records...");try{let i=r?Hs(await tr(n,r,{lkh:t.lkh,nid:t.nid,domain:t.domain})):zs(await en(n,{token:t.token,domain:t.domain}));return e.stop(`${L.green("Checked")} - records cross-referenced`),Ys(i)}catch(i){return e.stop(`${L.yellow("Skipped")} - ${N(i)}`),null}}function Js(e){let t=e.split(".");if(t.length!==3||!t[1])throw new Error("Invalid JWT format");let n=Buffer.from(t[1],"base64url").toString("utf-8");return JSON.parse(n)}function _n(e){return typeof e!="number"?"unknown":new Date(e*1e3).toISOString().split("T")[0]}function $i(e){$.note([`License ID: ${L.cyan(String(e.lid??"unknown"))}`,`Version: ${L.cyan(String(e.ver??"unknown"))}`,`Init version: ${String(e.iver??"unknown")}`,`Frontend: ${String(e.fe??"unknown")}`,`Created: ${_n(e.pat)}`,`Last updated: ${_n(e.uat)}`,`Expires: ${_n(e.exp)}`,`Install ID: ${String(e.nid??"unknown")}`].join(`
1427
+ `),L.yellow("License Details"))}function qs(e){let n=(/^https?:\/\//i.test(e)?e:`https://${e}`).replace(/\/+$/,"");if(n.endsWith("/api"))return[`${n}/license`];try{if(new URL(n).pathname!=="/")return[`${n}/license`]}catch{return[`${n}/license`]}return[`${n}/api/license`,`${n}/license`]}async function ji(e){let t=$.spinner(),n=null,r="no candidates";for(let a of qs(e)){t.start(`Checking ${a}...`);try{let s=await fetch(a);if(!s.ok){r=`${a} returned ${s.status}`,t.stop(`${L.yellow("Not here")} - ${r}`);continue}let d=(await s.text()).trim();if(!d||d.split(".").length!==3){r=`${a} did not return a JWT`,t.stop(`${L.yellow("Not here")} - ${r}`);continue}n=d,t.stop(`${L.green("Found")} - license endpoint responded`);break}catch(s){r=`${a}: ${N(s)}`,t.stop(`${L.yellow("Unreachable")} - ${r}`)}}if(n===null){$.log.warn(`No license endpoint found (last: ${r}). The site may be ejected, not a GenerateSaaS app, or serving its API elsewhere.`);let a=Ui(e);return a?await Li(t,{domain:a})??!1:!1}let i;try{i=Js(n)}catch{return $.log.error("Could not decode JWT payload."),!1}t.start("Verifying signature...");try{let a=process.env.GENERATESAAS_API_URL??st,s=await en(a,{token:n});if(s.valid)t.stop(`${L.green("Valid")} - signature verified`);else return t.stop(`${L.red("Invalid")} - ${s.reason}`),!1}catch{return t.stop(`${L.yellow("Skipped")} - could not reach verification service`),$.log.warn("Signature not verified. Displaying unverified claims:"),$i(i),!1}return $i(i),await Li(t,{token:n,lkh:typeof i.lkh=="string"?i.lkh:void 0,nid:typeof i.nid=="string"?i.nid:void 0,domain:Ui(e)})??!0}function Ui(e){try{return new URL(/^https?:\/\//i.test(e)?e:`https://${e}`).hostname}catch{return}}function Mi(e){e.command("verify").description("Verify a GenerateSaaS license on a deployed site").argument("[url]","URL of the site to verify (e.g. https://example.com or https://example.com/api)").option("--file <path>","file with URLs to check, one per line").action(async(t,n)=>{if(!t&&!n.file&&($.cancel("Provide a URL or --file <path>."),process.exit(1)),n.file){let i=(await Ks(n.file,"utf-8")).split(`
1428
+ `).map(a=>a.trim()).filter(a=>a&&!a.startsWith("#"));i.length===0&&($.cancel("No URLs found in file."),process.exit(1));let o=0;for(let a of i)await ji(a)&&o++,$.log.info("");$.log.success(`${o}/${i.length} sites verified.`)}else await ji(t)||process.exit(1)})}import{existsSync as Ws,rmSync as Xs}from"fs";import*as ee from"@clack/prompts";function Vi(e){e.command("auth").description("Set or update your GenerateSaaS API key").option("--clear","remove saved API key").action(async t=>{if(t.clear){Ws(me)?(Xs(me),ee.log.success("API key removed.")):ee.log.info("No API key configured.");return}let n=ct();n?ee.log.info(`Current API key: ****${n.slice(-4)}`):ee.log.info("No API key configured.");let r=await lt(),i=fe(r),o=ee.spinner();o.start("Verifying API key...");try{await ve(i),o.stop("API key verified."),Te(r),ee.log.success("API key saved.")}catch(a){o.stop("Verification failed."),a instanceof M&&a.status===401?ee.cancel("Invalid API key."):ee.cancel(N(a)),process.exit(1)}})}import{existsSync as Gt,rmSync as Zs,readFileSync as xn,writeFileSync as Bi}from"fs";import{join as Ne}from"path";import*as K from"@clack/prompts";var Qs=["packages/api/src/functions/maintenance/license-heartbeat.ts","packages/api/src/lib/cron-spread.ts","packages/api/src/lib/manifest.ts","packages/api/src/routes/internal/license.ts"],ec=[{file:"packages/api/src/routes/inngest.ts",removals:[`import { licenseHeartbeatFunction } from "../functions/maintenance/license-heartbeat";
1427
1429
  `,` licenseHeartbeatFunction,
1428
1430
  `]},{file:"packages/api/src/routes/internal/index.ts",removals:[`import licenseRoutes from "./license";
1429
1431
  `,` .route("/license", licenseRoutes)
1430
- `]}];function Us(e){return(e&&e.length>0?e.map(n=>pt[n]):Object.values(pt)).map(n=>Oe(n,bn))}function In(e){return Ft(e)?(Ls(e,{recursive:!0}),!0):!1}function Ms(e,t){if(!Ft(e))return!1;let n=Pn(e,"utf-8"),r=n;for(let i of t)r=r.replace(i,"");return r===n?!1:(xi(e,r,"utf-8"),!0)}function Vs(e){let t=Oe(e,".gitignore");if(!Ft(t))return!1;let n=Pn(t,"utf-8"),r=n.split(`
1432
+ `]}];function tc(e){return(e&&e.length>0?e.map(n=>ft[n]):Object.values(ft)).map(n=>Ne(n,En))}function On(e){return Gt(e)?(Zs(e,{recursive:!0}),!0):!1}function nc(e,t){if(!Gt(e))return!1;let n=xn(e,"utf-8"),r=n;for(let i of t)r=r.replace(i,"");return r===n?!1:(Bi(e,r,"utf-8"),!0)}function rc(e){let t=Ne(e,".gitignore");if(!Gt(t))return!1;let n=xn(t,"utf-8"),r=n.split(`
1431
1433
  `).filter(i=>!i.includes(".generatesaas")).join(`
1432
- `);return r===n?!1:(xi(t,r,"utf-8"),!0)}function Ci(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),n=Oe(t,fe),r;try{r=JSON.parse(Pn(n,"utf-8"))}catch{K.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let i=await K.text({message:'Type "eject" to confirm (this cannot be undone):',validate:s=>{if(s!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(K.isCancel(i)&&(K.cancel("Eject cancelled."),process.exit(0)),r.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r.licenseToken}`},body:JSON.stringify({event:"eject",version:r.version,frontend:r.frontend}),signal:AbortSignal.timeout(5e3)}),K.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{K.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let o=[],a=[];for(let s of Us(r.aiTools))In(Oe(t,s))&&o.push(s);for(let s of $s)In(Oe(t,s))&&o.push(s);In(Oe(t,W))&&o.push(W+"/");for(let s of js){let d=Oe(t,s.file);Ms(d,s.removals)?a.push(s.file):Ft(d)&&K.log.warn(`Could not auto-modify ${s.file} - manually remove license/heartbeat references.`)}Vs(t)&&a.push(".gitignore");for(let s of o)K.log.info(`Deleted ${s}`);for(let s of a)K.log.info(`Modified ${s}`);K.log.success("Ejected successfully. This project is now fully standalone.")})}var xe=new Bs().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.22.0").addHelpText("after",`
1434
+ `);return r===n?!1:(Bi(t,r,"utf-8"),!0)}function Fi(e){e.command("eject").description("Remove all GenerateSaaS ties - manifest, license, heartbeat, skills").action(async()=>{let t=process.cwd(),n=Ne(t,ge),r;try{r=JSON.parse(xn(n,"utf-8"))}catch{K.cancel("No GenerateSaaS project found in this directory."),process.exit(1)}let i=await K.text({message:'Type "eject" to confirm (this cannot be undone):',validate:s=>{if(s!=="eject")return'Type "eject" to confirm, or press Ctrl+C to cancel.'}});if(K.isCancel(i)&&(K.cancel("Eject cancelled."),process.exit(0)),r.licenseToken)try{await fetch("https://generatesaas.com/api/v1/heartbeat",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r.licenseToken}`},body:JSON.stringify({event:"eject",version:r.version,frontend:r.frontend}),signal:AbortSignal.timeout(5e3)}),K.log.info("Recorded the opt-out with generatesaas.com (final event - nothing is sent after this).")}catch{K.log.warn("Could not reach generatesaas.com to record the opt-out. Ejecting anyway.")}let o=[],a=[];for(let s of tc(r.aiTools))On(Ne(t,s))&&o.push(s);for(let s of Qs)On(Ne(t,s))&&o.push(s);On(Ne(t,z))&&o.push(z+"/");for(let s of ec){let d=Ne(t,s.file);nc(d,s.removals)?a.push(s.file):Gt(d)&&K.log.warn(`Could not auto-modify ${s.file} - manually remove license/heartbeat references.`)}rc(t)&&a.push(".gitignore");for(let s of o)K.log.info(`Deleted ${s}`);for(let s of a)K.log.info(`Modified ${s}`);K.log.success("Ejected successfully. This project is now fully standalone.")})}var Le=new ic().name("generatesaas").description("CLI for scaffolding and managing GenerateSaaS projects").version("1.23.0").addHelpText("after",`
1433
1435
  Examples:
1434
1436
  $ generatesaas init Interactive setup
1435
1437
  $ generatesaas init -n my-app -y Quick setup with defaults
1436
1438
  $ generatesaas status Check for updates
1437
1439
  $ generatesaas auth Set or update API key
1438
- `);hi(xe);Ei(xe);Ai(xe);_i(xe);Oi(xe);Ci(xe);xe.parseAsync().catch(e=>{Di.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});
1440
+ `);Ti(Le);Di(Le);Ni(Le);Mi(Le);Vi(Le);Fi(Le);Le.parseAsync().catch(e=>{Ki.cancel("An unexpected error occurred."),console.error(e),process.exit(1)});
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "generatesaas",
3
- "version": "1.22.0",
3
+ "version": "1.23.0",
4
4
  "type": "module",
5
5
  "description": "CLI for scaffolding and managing GenerateSaaS projects",
6
6
  "license": "UNLICENSED",