hatchkit 0.1.1

package/dist/provision/openpanel.js

@@ -0,0 +1,66 @@
+/*
+ * OpenPanel provisioning — creates a project + a client (write key
+ * pair) inside an existing self-hosted OpenPanel instance.
+ *
+ * OpenPanel's self-hosted API is still evolving, so this uses a
+ * best-effort path and falls back to a paste-in flow if the API call
+ * fails. Either way the resulting client id/secret are cached in the
+ * keychain under `openpanel:<name>:client-secret` so re-runs are idempotent.
+ */
+import { input, password as passwordPrompt } from "@inquirer/prompts";
+import { ensureOpenpanel } from "../config.js";
+import { SECRET_KEYS, getSecret, setSecret } from "../utils/secrets.js";
+export async function provisionOpenpanelClient(clientName) {
+    const cfg = await ensureOpenpanel();
+    const { url, organizationSlug, token } = cfg;
+    if (!organizationSlug) {
+        throw new Error("OpenPanel config is missing organization slug. Re-run `hatchkit config add openpanel`.");
+    }
+    // Reuse a previously-provisioned client for the same name if one
+    // exists — lets you re-run the command without creating duplicates.
+    const cachedSecret = await getSecret(SECRET_KEYS.openpanelClientSecret(clientName));
+    const cachedIdKey = SECRET_KEYS.openpanelClientSecret(`${clientName}:id`);
+    const cachedId = await getSecret(cachedIdKey);
+    if (cachedSecret && cachedId) {
+        return { projectName: clientName, clientId: cachedId, clientSecret: cachedSecret, apiUrl: url };
+    }
+    // Try the API first (best-effort). If it fails, prompt the user to
+    // paste the values from the OpenPanel dashboard.
+    let clientId = null;
+    let clientSecret = null;
+    try {
+        const res = await fetch(`${url}/api/client`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${token}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                organizationSlug,
+                project: { name: clientName },
+                client: { name: clientName, type: "write" },
+            }),
+        });
+        if (res.ok) {
+            const body = (await res.json());
+            if (body.clientId && body.clientSecret) {
+                clientId = body.clientId;
+                clientSecret = body.clientSecret;
+            }
+        }
+    }
+    catch {
+        // fall through to paste flow
+    }
+    if (!clientId || !clientSecret) {
+        console.log(`  OpenPanel API couldn't auto-create the client for '${clientName}'.\n` +
+            `  Open ${url}/${organizationSlug} → create a project named "${clientName}" →\n` +
+            `  add a write client, then paste the credentials below.`);
+        clientId = await input({ message: `OpenPanel clientId for ${clientName}:` });
+        clientSecret = await passwordPrompt({ message: `OpenPanel clientSecret for ${clientName}:` });
+    }
+    await setSecret(SECRET_KEYS.openpanelClientSecret(clientName), clientSecret);
+    await setSecret(cachedIdKey, clientId);
+    return { projectName: clientName, clientId, clientSecret, apiUrl: url };
+}
+//# sourceMappingURL=openpanel.js.map

package/dist/provision/openpanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openpanel.js","sourceRoot":"","sources":["../../src/provision/openpanel.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AASxE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,UAAkB;IAC/D,MAAM,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;IACpC,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAC7C,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,oEAAoE;IACpE,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,MAAM,WAAW,GAAG,WAAW,CAAC,qBAAqB,CAAC,GAAG,UAAU,KAAK,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAClG,CAAC;IAED,mEAAmE;IACnE,iDAAiD;IACjD,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,gBAAgB;gBAChB,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;aAC5C,CAAC;SACH,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiD,CAAC;YAChF,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBACzB,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CACT,wDAAwD,UAAU,MAAM;YACtE,UAAU,GAAG,IAAI,gBAAgB,8BAA8B,UAAU,OAAO;YAChF,yDAAyD,CAC5D,CAAC;QACF,QAAQ,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,UAAU,GAAG,EAAE,CAAC,CAAC;QAC7E,YAAY,GAAG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,8BAA8B,UAAU,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,SAAS,CAAC,WAAW,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACvC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC1E,CAAC"}

package/dist/provision/resend.d.ts

@@ -0,0 +1,16 @@
+export interface ResendClient {
+    keyName: string;
+    apiKey: string;
+    domainId?: string;
+    /** The full API key is only returned by Resend once; we print it
+     *  inline and also return it so the caller can persist. */
+    raw: string;
+}
+export declare function provisionResendClient(clientName: string, domainId?: string): Promise<ResendClient>;
+/** List verified Resend domains so the caller can pick one. */
+export declare function listResendDomains(): Promise<Array<{
+    id: string;
+    name: string;
+    status: string;
+}>>;
+//# sourceMappingURL=resend.d.ts.map

package/dist/provision/resend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.d.ts","sourceRoot":"","sources":["../../src/provision/resend.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;+DAC2D;IAC3D,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,CAAC,CAsBvB;AAED,+DAA+D;AAC/D,wBAAsB,iBAAiB,IAAI,OAAO,CAChD,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CACpD,CAQA"}

package/dist/provision/resend.js

@@ -0,0 +1,43 @@
+/*
+ * Resend provisioning — creates a restricted API key scoped to a
+ * specific verified sending domain. One key per env (dev / prod)
+ * keeps blast radius small if either leaks.
+ *
+ * API: https://resend.com/docs/api-reference/api-keys/create-api-key
+ *   POST /api-keys  { name, permission: "sending_access", domain_id }
+ */
+import { ensureResend } from "../config.js";
+export async function provisionResendClient(clientName, domainId) {
+    const cfg = await ensureResend();
+    const body = {
+        name: clientName,
+        permission: "sending_access",
+    };
+    if (domainId)
+        body.domain_id = domainId;
+    const res = await fetch("https://api.resend.com/api-keys", {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${cfg.apiKey}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+        throw new Error(`Resend create key failed: HTTP ${res.status} ${await res.text()}`);
+    }
+    const data = (await res.json());
+    return { keyName: clientName, apiKey: data.token, domainId, raw: data.token };
+}
+/** List verified Resend domains so the caller can pick one. */
+export async function listResendDomains() {
+    const cfg = await ensureResend();
+    const res = await fetch("https://api.resend.com/domains", {
+        headers: { Authorization: `Bearer ${cfg.apiKey}` },
+    });
+    if (!res.ok)
+        throw new Error(`Resend list domains failed: HTTP ${res.status}`);
+    const body = (await res.json());
+    return body.data ?? [];
+}
+//# sourceMappingURL=resend.js.map

package/dist/provision/resend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.js","sourceRoot":"","sources":["../../src/provision/resend.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAW5C,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,EAClB,QAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;IAEjC,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,gBAAgB;KAC7B,CAAC;IACF,IAAI,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAExC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,iCAAiC,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE;YACrC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkC,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AAChF,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,iBAAiB;IAGrC,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gCAAgC,EAAE;QACxD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE;KACnD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkE,CAAC;IACjG,OAAO,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/scaffold/app.d.ts

@@ -0,0 +1,13 @@
+import type { ProjectConfig } from "../prompts.js";
+import { type ProjectPorts } from "../utils/ports.js";
+import { type DotenvxSeedResult } from "./dotenvx.js";
+export interface ScaffoldResult {
+    modifications: string[];
+    ports: ProjectPorts;
+    /** Populated by seedDotenvxProduction on real (non-dry-run) scaffolds.
+     *  The private key is also mirrored into the OS keychain. */
+    dotenvx?: DotenvxSeedResult;
+}
+/** Scaffold a new app by copying the starter template and customizing it. */
+export declare function scaffoldApp(config: ProjectConfig, outputDir: string): Promise<ScaffoldResult>;
+//# sourceMappingURL=app.d.ts.map

package/dist/scaffold/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/scaffold/app.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAa,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,KAAK,YAAY,EAAoB,MAAM,mBAAmB,CAAC;AAExE,OAAO,EAAE,KAAK,iBAAiB,EAAyB,MAAM,cAAc,CAAC;AAqB7E,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,YAAY,CAAC;IACpB;iEAC6D;IAC7D,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,6EAA6E;AAC7E,wBAAsB,WAAW,CAC/B,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,cAAc,CAAC,CA8FzB"}

package/dist/scaffold/app.js

@@ -0,0 +1,340 @@
+/*
+ * scaffoldApp orchestrator.
+ *
+ * Responsibilities in order:
+ *   1. Validate preconditions (starter submodule present, target empty).
+ *   2. Copy the starter template to `outputDir` (fs cpSync with filter).
+ *   3. Customize the copy: project name, env files, feature flag strip,
+ *      bundle IDs, port assignment + propagation, ML playground prune,
+ *      next.config for static export when native is selected.
+ *   4. Roll back (rm output dir + unregister reserved ports) if any
+ *      step after the copy throws.
+ *
+ * The actual file-rewriting logic lives in starter-files.ts and
+ * pkg-json.ts; this file is the control flow.
+ */
+import { cpSync, existsSync, readFileSync, readdirSync, realpathSync, rmSync, writeFileSync, } from "node:fs";
+import { join, resolve } from "node:path";
+import chalk from "chalk";
+import ora from "ora";
+import { addUsedPorts, getUsedPorts, removeUsedPorts } from "../config.js";
+import { explainFsError } from "../utils/errors.js";
+import { pickProjectPorts } from "../utils/ports.js";
+import { getCliVersion } from "../utils/version.js";
+import { seedDotenvxProduction } from "./dotenvx.js";
+import { MANIFEST_FILENAME, toManifest, writeManifest } from "./manifest.js";
+import { stripPackageJsonBuildBlock, stripPackageJsonDeps, stripPackageJsonScripts, unchainTypecheckScript, } from "./pkg-json.js";
+import { applyPorts, flipNextConfigToStaticExport, removeIfExists, replaceInFile, stripMobileBridgeFromLayout, updateEnvExample, } from "./starter-files.js";
+// Monorepo root → starter submodule
+const MONOREPO_ROOT = resolve(join(import.meta.dirname, "..", "..", ".."));
+const STARTER_ROOT = join(MONOREPO_ROOT, "starter");
+/** Scaffold a new app by copying the starter template and customizing it. */
+export async function scaffoldApp(config, outputDir) {
+    if (config.dryRun) {
+        return {
+            modifications: scaffoldDryRun(config, outputDir),
+            // Dry-run still picks ports so the summary is accurate, but
+            // doesn't persist them.
+            ports: await pickProjectPorts(getUsedPorts(), {
+                nativeHmr: config.features.includes("desktop") || config.features.includes("mobile"),
+            }),
+        };
+    }
+    if (!existsSync(STARTER_ROOT)) {
+        throw new Error(`Starter template not found at ${STARTER_ROOT}. Run 'git submodule update --init' in the monorepo root.`);
+    }
+    // Bail if the target already exists — without this, cpSync silently
+    // merges new files into whatever is there, mixing old and new state.
+    if (existsSync(outputDir)) {
+        const entries = readdirSync(outputDir);
+        if (entries.length > 0) {
+            // If the target looks like a previously-scaffolded project,
+            // nudge the user toward `update` instead of a hard fail.
+            const hasManifest = entries.includes(MANIFEST_FILENAME);
+            const hint = hasManifest
+                ? ` This looks like a previously-scaffolded project (${MANIFEST_FILENAME} is present). Try \`hatchkit update\` from inside it to add features.`
+                : "";
+            throw new Error(`Output directory ${outputDir} already exists and is not empty. Move or remove it first.${hint}`);
+        }
+    }
+    // Resolve symlinks — if the submodule path is itself a symlink (tests,
+    // local dev linking to a sibling checkout), cpSync would otherwise try
+    // to recreate the symlink at outputDir and fail with EEXIST.
+    const resolvedStarter = realpathSync(STARTER_ROOT);
+    // Track claimed resources so a mid-scaffold failure can be rolled
+    // back: filesystem + port registrations.
+    const reservedPorts = [];
+    const rollback = () => {
+        if (existsSync(outputDir)) {
+            try {
+                rmSync(outputDir, { recursive: true, force: true });
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        if (reservedPorts.length > 0) {
+            try {
+                removeUsedPorts(reservedPorts);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    };
+    const copyStart = Date.now();
+    const copySpinner = ora(`Copying starter from ${resolvedStarter}`).start();
+    try {
+        cpSync(resolvedStarter, outputDir, {
+            recursive: true,
+            filter: (src) => {
+                const rel = src.replace(resolvedStarter, "");
+                if (rel === "/.git" || rel.startsWith("/.git/"))
+                    return false;
+                if (rel.includes("/node_modules"))
+                    return false;
+                if (rel.includes("/.next"))
+                    return false;
+                if (rel.includes("/dist/"))
+                    return false;
+                return true;
+            },
+        });
+        copySpinner.succeed(`Starter copied (${elapsed(copyStart)})`);
+    }
+    catch (err) {
+        copySpinner.fail("Starter copy failed");
+        rollback();
+        throw new Error(explainFsError(err, "Failed to copy starter template"));
+    }
+    const customizeStart = Date.now();
+    const customizeSpinner = ora("Customizing for your project").start();
+    try {
+        const result = await runScaffoldSteps(config, outputDir, reservedPorts);
+        customizeSpinner.succeed(`Scaffolded ${result.modifications.length} modifications (${elapsed(customizeStart)})`);
+        return result;
+    }
+    catch (err) {
+        customizeSpinner.fail("Customization failed");
+        rollback();
+        throw err;
+    }
+}
+/** Format ms-since-start as a compact "123ms" or "1.4s". */
+function elapsed(startMs) {
+    const ms = Date.now() - startMs;
+    return ms < 1000 ? `${ms}ms` : `${(ms / 1000).toFixed(1)}s`;
+}
+/** Customize the starter copy. Mutates `reservedPorts` in place so the
+ *  outer orchestrator can unregister them on failure. */
+async function runScaffoldSteps(config, outputDir, reservedPorts) {
+    const modifications = [];
+    // Rename the project in package.json
+    replaceInFile(join(outputDir, "package.json"), "node-realtime-starter", config.name);
+    modifications.push("package.json (renamed project)");
+    // .env.example files: production URLs for this project's domain.
+    // .env.development is left alone (local dev defaults should stay pointing at localhost).
+    updateEnvExample(outputDir, "packages/server/.env.example", config);
+    updateEnvExample(outputDir, "packages/client/.env.example", config);
+    modifications.push("updated .env.example files with production URLs");
+    // Feature-flag removal
+    if (!config.features.includes("websocket")) {
+        removeIfExists(join(outputDir, "packages/server/src/ws"));
+        modifications.push("removed: ws/ (WebSocket not selected)");
+    }
+    if (!config.features.includes("stripe")) {
+        removeIfExists(join(outputDir, "packages/server/src/services/stripe.ts"));
+        modifications.push("removed: stripe service (Stripe not selected)");
+    }
+    const wantsDesktop = config.features.includes("desktop");
+    const wantsMobile = config.features.includes("mobile");
+    const bundleId = config.name.replace(/[^a-z0-9]/gi, "").toLowerCase();
+    // Port assignment — tested-free via isPortFree + persisted into the
+    // CLI registry so subsequent scaffolds can't collide.
+    const ports = await pickProjectPorts(getUsedPorts(), {
+        nativeHmr: wantsDesktop || wantsMobile,
+    });
+    const claimed = [ports.server, ports.client, ports.nativeHmr].filter((p) => p !== undefined);
+    addUsedPorts(claimed);
+    reservedPorts.push(...claimed);
+    applyPorts(outputDir, ports, { wantsDesktop, wantsMobile });
+    modifications.push(`assigned ports: server=${ports.server} client=${ports.client}` +
+        (ports.nativeHmr ? ` native=${ports.nativeHmr}` : ""));
+    // Desktop (Electron) strip / substitute
+    if (!wantsDesktop) {
+        removeIfExists(join(outputDir, "electron"));
+        removeIfExists(join(outputDir, ".github/workflows/desktop-release.yml"));
+        removeIfExists(join(outputDir, "build"));
+        removeIfExists(join(outputDir, "packages/client/src/types/electron.d.ts"));
+        stripPackageJsonScripts(outputDir, [
+            "dev:desktop",
+            "dev:electron",
+            "build:desktop",
+            "electron:compile",
+            "electron:build",
+            "electron:preview",
+            "typecheck:electron",
+            "icons:desktop",
+            "itch:push:mac",
+            "itch:push:win",
+            "itch:push:linux",
+        ]);
+        unchainTypecheckScript(outputDir);
+        stripPackageJsonBuildBlock(outputDir);
+        stripPackageJsonDeps(outputDir, [
+            "electron",
+            "electron-builder",
+            "electron-icon-builder",
+            "wait-on",
+        ]);
+        modifications.push("removed: desktop (Electron) scaffolding");
+    }
+    else {
+        replaceInFile(join(outputDir, "package.json"), "{{projectName}}", config.name);
+        replaceInFile(join(outputDir, "package.json"), "{{bundleId}}", bundleId);
+    }
+    // Mobile (Capacitor) strip / substitute
+    if (!wantsMobile) {
+        removeIfExists(join(outputDir, "ios"));
+        removeIfExists(join(outputDir, "android"));
+        removeIfExists(join(outputDir, "capacitor.config.ts"));
+        removeIfExists(join(outputDir, "packages/client/src/mobile"));
+        removeIfExists(join(outputDir, "scripts/android-dev.sh"));
+        removeIfExists(join(outputDir, "scripts/android-env.sh"));
+        removeIfExists(join(outputDir, "scripts/ios-dev.sh"));
+        removeIfExists(join(outputDir, ".github/workflows/mobile-release.yml"));
+        removeIfExists(join(outputDir, "resources"));
+        stripMobileBridgeFromLayout(outputDir);
+        stripPackageJsonScripts(outputDir, [
+            "dev:android",
+            "dev:ios",
+            "build:mobile",
+            "cap:add:ios",
+            "cap:add:android",
+            "cap:sync",
+            "cap:run:ios",
+            "cap:run:android",
+            "build:ios:release",
+            "build:android:release",
+            "build:android:apk",
+            "mobile:assets",
+        ]);
+        stripPackageJsonDeps(outputDir, [
+            "@capacitor/core",
+            "@capacitor/cli",
+            "@capacitor/ios",
+            "@capacitor/android",
+            "@capacitor/splash-screen",
+            "@capacitor/status-bar",
+            "@capacitor/screen-orientation",
+            "@capacitor/preferences",
+            "@capacitor/app",
+            "@capacitor/assets",
+        ]);
+        modifications.push("removed: mobile (Capacitor) scaffolding");
+    }
+    else {
+        replaceInFile(join(outputDir, "capacitor.config.ts"), "{{projectName}}", config.name);
+        replaceInFile(join(outputDir, "capacitor.config.ts"), "{{bundleId}}", bundleId);
+    }
+    if (wantsDesktop || wantsMobile) {
+        flipNextConfigToStaticExport(outputDir);
+        modifications.push("next.config.ts: output 'standalone' → 'export'");
+    }
+    // ML playground prune — remove unselected service pages.
+    const allMlServices = [
+        "background-removal",
+        "subtitles",
+        "image-recognition",
+        "3d-extraction",
+    ];
+    for (const service of allMlServices) {
+        if (!config.mlServices.includes(service)) {
+            removeIfExists(join(outputDir, `packages/client/src/app/(protected)/playground/${service}`));
+            modifications.push(`removed: playground/${service} (not selected)`);
+        }
+    }
+    // No ML services at all → remove the entire playground + infrastructure.
+    if (config.mlServices.length === 0) {
+        removeIfExists(join(outputDir, "packages/client/src/app/(protected)/playground"));
+        removeIfExists(join(outputDir, "packages/client/src/components/ml"));
+        removeIfExists(join(outputDir, "packages/server/src/trpc/routers/ml.ts"));
+        removeIfExists(join(outputDir, "packages/server/src/services/ml.ts"));
+        removeIfExists(join(outputDir, "packages/shared/src/ml-types.ts"));
+        // Strip ml router from the tRPC router registration.
+        const routerPath = join(outputDir, "packages/server/src/trpc/router.ts");
+        if (existsSync(routerPath)) {
+            let content = readFileSync(routerPath, "utf-8");
+            content = content.replace('import { mlRouter } from "./routers/ml.js";\n', "");
+            content = content.replace("  ml: mlRouter,\n", "");
+            writeFileSync(routerPath, content, "utf-8");
+        }
+        // Strip ml-types export from shared barrel.
+        const sharedIndexPath = join(outputDir, "packages/shared/src/index.ts");
+        if (existsSync(sharedIndexPath)) {
+            let content = readFileSync(sharedIndexPath, "utf-8");
+            content = content.replace('export * from "./ml-types.js";\n', "");
+            writeFileSync(sharedIndexPath, content, "utf-8");
+        }
+        // Strip Playground from protected navbar.
+        const layoutPath = join(outputDir, "packages/client/src/app/(protected)/layout.tsx");
+        if (existsSync(layoutPath)) {
+            let content = readFileSync(layoutPath, "utf-8");
+            content = content.replace(/\s*<Link\s+href="\/playground"[^>]*>[^<]*<\/Link>/, "");
+            writeFileSync(layoutPath, content, "utf-8");
+        }
+        modifications.push("removed: ML playground, ML router, ML types, ML navbar link");
+    }
+    // Write the sanitized manifest so `hatchkit update` can diff
+    // against this scaffold's choices later. See manifest.ts for the
+    // strict list of fields that are safe to persist.
+    writeManifest(outputDir, toManifest(config, ports, getCliVersion()));
+    modifications.push(".hatchkit.json (project manifest)");
+    // Seed .env.production via dotenvx: encrypt supplied values, mint a
+    // keypair, mirror the private key into the OS keychain. Unsupplied
+    // keys land as plaintext CHANGE_ME_<KEY> placeholders.
+    const dotenvx = await seedDotenvxProduction(outputDir, config, config.envValues ?? {});
+    modifications.push(`dotenvx: ${dotenvx.encryptedKeys.length} encrypted, ${dotenvx.placeholderKeys.length} placeholders`);
+    return { modifications, ports, dotenvx };
+}
+/** Dry run — list what would happen without touching disk. */
+function scaffoldDryRun(config, outputDir) {
+    console.log(chalk.bold("\n  [dry-run] Would scaffold from starter template:\n"));
+    console.log(chalk.dim(`    Source: ${STARTER_ROOT}`));
+    console.log(chalk.dim(`    Target: ${outputDir}`));
+    console.log();
+    const actions = [];
+    actions.push("Copy starter template");
+    actions.push(`Rename project to "${config.name}"`);
+    actions.push(`Set domain to "${config.domain}"`);
+    if (!config.features.includes("websocket"))
+        actions.push("Remove WebSocket support");
+    if (!config.features.includes("stripe"))
+        actions.push("Remove Stripe integration");
+    if (!config.features.includes("desktop"))
+        actions.push("Remove desktop (Electron) scaffolding");
+    if (!config.features.includes("mobile"))
+        actions.push("Remove mobile (Capacitor) scaffolding");
+    if (config.features.includes("desktop") || config.features.includes("mobile")) {
+        actions.push("Flip next.config.ts to output: 'export' (static)");
+    }
+    if (config.mlServices.length === 0) {
+        actions.push("Remove ML playground, router, types");
+    }
+    else {
+        const removed = [
+            "background-removal",
+            "subtitles",
+            "image-recognition",
+            "3d-extraction",
+        ].filter((s) => !config.mlServices.includes(s));
+        if (removed.length > 0) {
+            actions.push(`Remove unused ML pages: ${removed.join(", ")}`);
+        }
+    }
+    for (const action of actions) {
+        console.log(chalk.dim(`    - ${action}`));
+    }
+    return actions;
+}
+//# sourceMappingURL=app.js.map

package/dist/scaffold/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/scaffold/app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,MAAM,EACN,UAAU,EACV,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAqB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAA0B,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,UAAU,EACV,4BAA4B,EAC5B,cAAc,EACd,aAAa,EACb,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,oCAAoC;AACpC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAUpD,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAqB,EACrB,SAAiB;IAEjB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,aAAa,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC;YAChD,4DAA4D;YAC5D,wBAAwB;YACxB,KAAK,EAAE,MAAM,gBAAgB,CAAC,YAAY,EAAE,EAAE;gBAC5C,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACrF,CAAC;SACH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iCAAiC,YAAY,2DAA2D,CACzG,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,4DAA4D;YAC5D,yDAAyD;YACzD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,WAAW;gBACtB,CAAC,CAAC,qDAAqD,iBAAiB,uEAAuE;gBAC/I,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CACb,oBAAoB,SAAS,6DAA6D,IAAI,EAAE,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,eAAe,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAEnD,kEAAkE;IAClE,yCAAyC;IACzC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,eAAe,CAAC,aAAa,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,eAAe,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE;YACjC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;gBACd,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC9D,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACzC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,WAAW,CAAC,OAAO,CAAC,mBAAmB,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACxC,QAAQ,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,gBAAgB,GAAG,GAAG,CAAC,8BAA8B,CAAC,CAAC,KAAK,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACxE,gBAAgB,CAAC,OAAO,CACtB,cAAc,MAAM,CAAC,aAAa,CAAC,MAAM,mBAAmB,OAAO,CAAC,cAAc,CAAC,GAAG,CACvF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gBAAgB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC9C,QAAQ,EAAE,CAAC;QACX,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAChC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED;yDACyD;AACzD,KAAK,UAAU,gBAAgB,CAC7B,MAAqB,EACrB,SAAiB,EACjB,aAAuB;IAEvB,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,qCAAqC;IACrC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrF,aAAa,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAErD,iEAAiE;IACjE,yFAAyF;IACzF,gBAAgB,CAAC,SAAS,EAAE,8BAA8B,EAAE,MAAM,CAAC,CAAC;IACpE,gBAAgB,CAAC,SAAS,EAAE,8BAA8B,EAAE,MAAM,CAAC,CAAC;IACpE,aAAa,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAEtE,uBAAuB;IACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC1D,aAAa,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC,CAAC;QAC1E,aAAa,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEtE,oEAAoE;IACpE,sDAAsD;IACtD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,EAAE;QACnD,SAAS,EAAE,YAAY,IAAI,WAAW;KACvC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAClE,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CACpC,CAAC;IACF,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,aAAa,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAC/B,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,IAAI,CAChB,0BAA0B,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,MAAM,EAAE;QAC7D,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACxD,CAAC;IAEF,wCAAwC;IACxC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5C,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,uCAAuC,CAAC,CAAC,CAAC;QACzE,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACzC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC,CAAC;QAC3E,uBAAuB,CAAC,SAAS,EAAE;YACjC,aAAa;YACb,cAAc;YACd,eAAe;YACf,kBAAkB;YAClB,gBAAgB;YAChB,kBAAkB;YAClB,oBAAoB;YACpB,eAAe;YACf,eAAe;YACf,eAAe;YACf,iBAAiB;SAClB,CAAC,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAClC,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACtC,oBAAoB,CAAC,SAAS,EAAE;YAC9B,UAAU;YACV,kBAAkB;YAClB,uBAAuB;YACvB,SAAS;SACV,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/E,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACvC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3C,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACvD,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC,CAAC;QAC9D,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC1D,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC1D,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACtD,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC,CAAC;QACxE,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;QAC7C,2BAA2B,CAAC,SAAS,CAAC,CAAC;QACvC,uBAAuB,CAAC,SAAS,EAAE;YACjC,aAAa;YACb,SAAS;YACT,cAAc;YACd,aAAa;YACb,iBAAiB;YACjB,UAAU;YACV,aAAa;YACb,iBAAiB;YACjB,mBAAmB;YACnB,uBAAuB;YACvB,mBAAmB;YACnB,eAAe;SAChB,CAAC,CAAC;QACH,oBAAoB,CAAC,SAAS,EAAE;YAC9B,iBAAiB;YACjB,gBAAgB;YAChB,gBAAgB;YAChB,oBAAoB;YACpB,0BAA0B;YAC1B,uBAAuB;YACvB,+BAA+B;YAC/B,wBAAwB;YACxB,gBAAgB;YAChB,mBAAmB;SACpB,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACtF,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;QAChC,4BAA4B,CAAC,SAAS,CAAC,CAAC;QACxC,aAAa,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACvE,CAAC;IAED,yDAAyD;IACzD,MAAM,aAAa,GAAgB;QACjC,oBAAoB;QACpB,WAAW;QACX,mBAAmB;QACnB,eAAe;KAChB,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,kDAAkD,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7F,aAAa,CAAC,IAAI,CAAC,uBAAuB,OAAO,iBAAiB,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAC,CAAC;QAClF,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC,CAAC;QACrE,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC,CAAC;QAC1E,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC,CAAC;QACtE,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC,CAAC;QAEnE,qDAAqD;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC;QACzE,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YACnD,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,4CAA4C;QAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;QACxE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,IAAI,OAAO,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACrD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;YAClE,aAAa,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,0CAA0C;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAC;QACrF,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,mDAAmD,EAAE,EAAE,CAAC,CAAC;YACnF,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IACpF,CAAC;IAED,6DAA6D;IAC7D,iEAAiE;IACjE,kDAAkD;IAClD,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACrE,aAAa,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAExD,oEAAoE;IACpE,mEAAmE;IACnE,uDAAuD;IACvD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACvF,aAAa,CAAC,IAAI,CAChB,YAAY,OAAO,CAAC,aAAa,CAAC,MAAM,eAAe,OAAO,CAAC,eAAe,CAAC,MAAM,eAAe,CACrG,CAAC;IAEF,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,8DAA8D;AAC9D,SAAS,cAAc,CAAC,MAAqB,EAAE,SAAiB;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,YAAY,EAAE,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAEjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG;YACd,oBAAoB;YACpB,WAAW;YACX,mBAAmB;YACnB,eAAe;SAChB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAc,CAAC,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/scaffold/dotenvx.d.ts

@@ -0,0 +1,30 @@
+import type { ProjectConfig } from "../prompts.js";
+export interface DotenvxValues {
+    /** Values to encrypt into .env.production. User-supplied only —
+     *  empty string / undefined = "I'll fill this in later" (then we
+     *  write a plaintext CHANGE_ME_<KEY> placeholder instead). */
+    [envKey: string]: string | undefined;
+}
+export interface DotenvxSeedResult {
+    /** Full DOTENV_PRIVATE_KEY_PRODUCTION (hex). Stored in keychain. */
+    privateKey: string;
+    /** Corresponding public key — also embedded at the top of
+     *  `.env.production` by dotenvx. Safe to log / commit. */
+    publicKey: string;
+    /** Keys that ended up as plaintext CHANGE_ME (user didn't supply). */
+    placeholderKeys: string[];
+    /** Keys that got encrypted. */
+    encryptedKeys: string[];
+}
+/** Populate the starter's `packages/server/.env.production` with
+ *  encrypted values + a plaintext CHANGE_ME_<KEY> for anything the
+ *  user didn't supply. Mirrors the generated private key into the
+ *  macOS Keychain (or equivalent) and returns it so callers can push
+ *  it to Coolify / print a retrieval hint. */
+export declare function seedDotenvxProduction(outputDir: string, config: ProjectConfig, userValues: DotenvxValues): Promise<DotenvxSeedResult>;
+/** Prompt the user for the subset of candidate keys that are
+ *  sensitive + likely already known at scaffold time. Anything they
+ *  leave blank falls through to CHANGE_ME. Skipped entirely in
+ *  non-interactive mode — presets should carry the values instead. */
+export declare function printDotenvxSummary(result: DotenvxSeedResult, projectName: string): void;
+//# sourceMappingURL=dotenvx.d.ts.map

package/dist/scaffold/dotenvx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenvx.d.ts","sourceRoot":"","sources":["../../src/scaffold/dotenvx.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,MAAM,WAAW,aAAa;IAC5B;;kEAE8D;IAC9D,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB;8DAC0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,+BAA+B;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAWD;;;;8CAI8C;AAC9C,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,aAAa,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAiD5B;AAwDD;;;sEAGsE;AACtE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAmBxF"}