kasy-cli 1.21.9 → 1.23.0

package/lib/commands/add.js

@@ -29,18 +29,18 @@ const { toPackageName, buildTokens } = require('../scaffold/backends/firebase/to
 
 const execAsync = promisify(exec);
 
-/** URL do endpoint LLM no app (espelha defineUpdates de llm_chat). */
-function resolveLlmChatEndpoint(answers, kitSetup) {
+/** URL do endpoint AI no app (espelha defineUpdates de ai_chat). */
+function resolveAiChatEndpoint(answers, kitSetup) {
   if (kitSetup?.backendProvider === 'api') {
-    return answers.llmEndpoint || 'YOUR_LLM_ENDPOINT';
+    return answers.aiEndpoint || 'YOUR_AI_ENDPOINT';
   }
   if (kitSetup?.backendProvider === 'supabase') {
     const ref = kitSetup.supabaseProjectId || 'YOUR_PROJECT_REF';
-    return `https://${ref}.supabase.co/functions/v1/llm-chat`;
+    return `https://${ref}.supabase.co/functions/v1/ai-chat`;
   }
   const projectId = kitSetup?.firebaseProjectId || 'YOUR_PROJECT_ID';
   const region = kitSetup?.functionsRegion || 'us-central1';
-  return `https://${region}-${projectId}.cloudfunctions.net/llmChat`;
+  return `https://${region}-${projectId}.cloudfunctions.net/aiChat`;
 }
 
 // ── Helpers ──────────────────────────────────────────────────────────────────
@@ -54,6 +54,7 @@ async function getActiveModules(kitSetup, projectDir) {
   if (kitSetup.analyticsProvider === 'mixpanel') modules.push('analytics');
   if (kitSetup.withFacebookPixel) modules.push('facebook');
   if (kitSetup.subscriptionModule) modules.push('revenuecat');
+  if (kitSetup.stripeModule) modules.push('stripe');
   if (kitSetup.withOnboarding) modules.push('onboarding');
   if (kitSetup.webCompat) modules.push('web');
   if (kitSetup.feedbackModule) modules.push('feedback');
@@ -61,7 +62,7 @@ async function getActiveModules(kitSetup, projectDir) {
   const featuresPath = path.join(projectDir, 'lib', 'core', 'config', 'features.dart');
   if (await fs.pathExists(featuresPath)) {
     const content = await fs.readFile(featuresPath, 'utf8');
-    if (/const bool withLlmChat\s*=\s*true/.test(content)) modules.push('llm_chat');
+    if (/const bool withAiChat\s*=\s*true/.test(content)) modules.push('ai_chat');
   }
 
   if (await fs.pathExists(path.join(projectDir, '.github', 'workflows'))) modules.push('ci');
@@ -214,9 +215,11 @@ function applyKitSetupFlag(config, module, answers) {
     case 'facebook':
       config.withFacebookPixel = true;
       break;
+    case 'stripe':
+      config.stripeModule = true;
+      break;
     case 'revenuecat':
       config.subscriptionModule = true;
-      if (answers.revenuecatWeb) config.revenuecatWeb = true;
       // Track which RC keys the user configured so `kasy doctor` can warn
       // about release readiness without re-reading .env. Booleans only — we
       // never persist the key values themselves to kit_setup.json.
@@ -235,7 +238,7 @@ function applyKitSetupFlag(config, module, answers) {
     case 'feedback':
       config.feedbackModule = true;
       break;
-    case 'llm_chat':
+    case 'ai_chat':
     case 'widget':
     case 'ci':
       // controlled by features.dart / patch — no extra kit_setup flag needed
@@ -287,6 +290,16 @@ const MODULE_META = {
     featureFlag: null,
     pubspecDeps: {},
   },
+  stripe: {
+    // Stripe (web payments) is server-side only: no client env, no dart-define,
+    // no extra pubspec deps. Enabling the module flips withStripe; the secret
+    // keys are configured on the backend via `kasy configure stripe`.
+    promptKeys: [],
+    defineUpdates: () => ({}),
+    envLines: () => [],
+    featureFlag: 'withStripe',
+    pubspecDeps: {},
+  },
   onboarding: {
     promptKeys: [],
     defineUpdates: () => ({}),
@@ -308,15 +321,15 @@ const MODULE_META = {
     featureFlag: 'withFeedback',
     pubspecDeps: {},
   },
-  llm_chat: {
-    promptKeys: ['llmProvider', 'llmSystemPrompt', 'llmApiKey'],
+  ai_chat: {
+    promptKeys: ['aiProvider', 'aiSystemPrompt', 'aiApiKey'],
     defineUpdates: (a, kitSetup) => ({
-      LLM_CHAT_ENDPOINT: resolveLlmChatEndpoint(a, kitSetup),
+      AI_CHAT_ENDPOINT: resolveAiChatEndpoint(a, kitSetup),
     }),
     envLines: (a, kitSetup) => [
-      `LLM_CHAT_ENDPOINT=${resolveLlmChatEndpoint(a, kitSetup)}`,
+      `AI_CHAT_ENDPOINT=${resolveAiChatEndpoint(a, kitSetup)}`,
     ],
-    featureFlag: 'withLlmChat',
+    featureFlag: 'withAiChat',
     pubspecDeps: {},
   },
   widget: {
@@ -378,8 +391,8 @@ const PROMPT_QUESTIONS = {
     },
     onCancel: cancel,
   }),
-  llmProvider: (t, cancel) => ui.select({
-    message: t('add.prompt.llmProvider'),
+  aiProvider: (t, cancel) => ui.select({
+    message: t('add.prompt.aiProvider'),
     initialValue: 'openai',
     options: [
       { value: 'openai', label: 'OpenAI (gpt-4o-mini)' },
@@ -387,38 +400,38 @@ const PROMPT_QUESTIONS = {
     ],
     onCancel: cancel,
   }),
-  llmSystemPrompt: (t, cancel) => ui.text({
-    message: t('add.prompt.llmSystemPrompt'),
+  aiSystemPrompt: (t, cancel) => ui.text({
+    message: t('add.prompt.aiSystemPrompt'),
     onCancel: cancel,
   }),
-  llmApiKey: (t, cancel) => ui.password({
-    message: t('add.prompt.llmApiKey'),
+  aiApiKey: (t, cancel) => ui.password({
+    message: t('add.prompt.aiApiKey'),
     onCancel: cancel,
   }),
-  llmEndpoint: (t, cancel) => ui.text({
-    message: t('add.prompt.llmEndpoint'),
+  aiEndpoint: (t, cancel) => ui.text({
+    message: t('add.prompt.aiEndpoint'),
     onCancel: cancel,
   }),
 };
 
-// ── LLM Chat post-add: copy edge function, set secrets, write functions/.env ──
+// ── AI Chat post-add: copy edge function, set secrets, write functions/.env ──
 
 const SUPABASE_EDGE_FUNCTIONS_SOURCE = path.join(
   __dirname, '..', 'scaffold', 'backends', 'supabase', 'edge-functions'
 );
 
-async function postAddLlmChat(projectDir, kitSetup, answers, t) {
+async function postAddAiChat(projectDir, kitSetup, answers, t) {
   const backend = kitSetup?.backendProvider ?? 'firebase';
-  const apiKey = answers.llmApiKey?.trim() || '';
-  const provider = answers.llmProvider || 'openai';
-  const systemPrompt = answers.llmSystemPrompt?.trim() || '';
+  const apiKey = answers.aiApiKey?.trim() || '';
+  const provider = answers.aiProvider || 'openai';
+  const systemPrompt = answers.aiSystemPrompt?.trim() || '';
   const projectRef = kitSetup?.supabaseProjectId || '';
 
   // 1. Firebase: write functions/.env (non-secret vars read by Cloud Functions runtime)
   if (backend === 'firebase') {
     const envPath = path.join(projectDir, 'functions', '.env');
-    const lines = [`LLM_PROVIDER=${provider}`];
-    if (systemPrompt) lines.push(`LLM_SYSTEM_PROMPT=${systemPrompt}`);
+    const lines = [`AI_PROVIDER=${provider}`];
+    if (systemPrompt) lines.push(`AI_SYSTEM_PROMPT=${systemPrompt}`);
     const existing = (await fs.pathExists(envPath)) ? await fs.readFile(envPath, 'utf8') : '';
     const toAdd = lines.filter((l) => !existing.includes(l.split('=')[0]));
     if (toAdd.length > 0) {
@@ -428,11 +441,11 @@ async function postAddLlmChat(projectDir, kitSetup, answers, t) {
 
   // 1b. Supabase: copy Edge Function file + set ALL vars as Supabase Secrets
   //    (Edge Functions deployed on Supabase read from Deno.env.get() = Supabase Secrets,
-  //     NOT from local .env files — so LLM_PROVIDER and LLM_SYSTEM_PROMPT must be secrets too)
+  //     NOT from local .env files — so AI_PROVIDER and AI_SYSTEM_PROMPT must be secrets too)
   if (backend === 'supabase') {
-    // Copy llm-chat edge function into the project if not already present
-    const edgeFnSrc = path.join(SUPABASE_EDGE_FUNCTIONS_SOURCE, 'llm-chat');
-    const edgeFnDest = path.join(projectDir, 'supabase', 'functions', 'llm-chat');
+    // Copy ai-chat edge function into the project if not already present
+    const edgeFnSrc = path.join(SUPABASE_EDGE_FUNCTIONS_SOURCE, 'ai-chat');
+    const edgeFnDest = path.join(projectDir, 'supabase', 'functions', 'ai-chat');
     if (await fs.pathExists(edgeFnSrc) && !(await fs.pathExists(edgeFnDest))) {
       await fs.copy(edgeFnSrc, edgeFnDest);
     }
@@ -440,7 +453,7 @@ async function postAddLlmChat(projectDir, kitSetup, answers, t) {
 
   // 2. Set API key as secret (skip if blank)
   if (!apiKey) {
-    ui.log.warn(t('add.llm_chat.skipSecret'));
+    ui.log.warn(t('add.ai_chat.skipSecret'));
     return { deployOk: false, deployAttempted: false };
   }
 
@@ -449,29 +462,29 @@ async function postAddLlmChat(projectDir, kitSetup, answers, t) {
 
   if (backend === 'firebase') {
     const spinner = ui.spinner({ color: paintLime });
-    spinner.start(t('add.llm_chat.settingSecret'));
+    spinner.start(t('add.ai_chat.settingSecret'));
     try {
       // Write to temp file — avoids trailing newline (echo) and shell injection risks
-      const tmpFile = path.join(os.tmpdir(), `llm_api_key_${Date.now()}.tmp`);
+      const tmpFile = path.join(os.tmpdir(), `ai_api_key_${Date.now()}.tmp`);
       await fs.outputFile(tmpFile, apiKey, 'utf8');
-      await execAsync(`firebase functions:secrets:set LLM_API_KEY --data-file="${tmpFile}"`, { cwd: projectDir });
+      await execAsync(`firebase functions:secrets:set AI_API_KEY --data-file="${tmpFile}"`, { cwd: projectDir });
       await fs.remove(tmpFile);
-      spinner.stop(t('add.llm_chat.secretSet'));
+      spinner.stop(t('add.ai_chat.secretSet'));
       secretsOk = true;
     } catch {
-      spinner.stop(`⚠ ${t('add.llm_chat.secretFailed')}`);
-      ui.log.message(kleur.dim('Run manually: firebase functions:secrets:set LLM_API_KEY'));
+      spinner.stop(`⚠ ${t('add.ai_chat.secretFailed')}`);
+      ui.log.message(kleur.dim('Run manually: firebase functions:secrets:set AI_API_KEY'));
     }
   } else if (backend === 'supabase') {
     const spinner = ui.spinner({ color: paintLime });
-    spinner.start(t('add.llm_chat.settingSecret'));
-    // Set LLM_API_KEY, LLM_PROVIDER and LLM_SYSTEM_PROMPT all as Supabase Secrets.
+    spinner.start(t('add.ai_chat.settingSecret'));
+    // Set AI_API_KEY, AI_PROVIDER and AI_SYSTEM_PROMPT all as Supabase Secrets.
     // Deployed Edge Functions read from Deno.env.get() = Supabase Secrets, NOT from .env files.
     const esc = (v) => String(v).replace(/"/g, '\\"');
     const toSet = [
-      { name: 'LLM_API_KEY', value: apiKey },
-      { name: 'LLM_PROVIDER', value: provider },
-      ...(systemPrompt ? [{ name: 'LLM_SYSTEM_PROMPT', value: systemPrompt }] : []),
+      { name: 'AI_API_KEY', value: apiKey },
+      { name: 'AI_PROVIDER', value: provider },
+      ...(systemPrompt ? [{ name: 'AI_SYSTEM_PROMPT', value: systemPrompt }] : []),
     ];
     let allOk = true;
     for (const { name, value } of toSet) {
@@ -482,33 +495,33 @@ async function postAddLlmChat(projectDir, kitSetup, answers, t) {
       if (r && r.ok === false) allOk = false;
     }
     if (allOk) {
-      spinner.stop(t('add.llm_chat.secretSet'));
+      spinner.stop(t('add.ai_chat.secretSet'));
       secretsOk = true;
     } else {
-      spinner.stop(`⚠ ${t('add.llm_chat.secretFailed')}`);
-      ui.log.message(kleur.dim(`Run manually: supabase secrets set LLM_API_KEY=YOUR_KEY LLM_PROVIDER=${provider}${refFlag}`));
+      spinner.stop(`⚠ ${t('add.ai_chat.secretFailed')}`);
+      ui.log.message(kleur.dim(`Run manually: supabase secrets set AI_API_KEY=YOUR_KEY AI_PROVIDER=${provider}${refFlag}`));
     }
   }
 
-  // 3. Deploy the LLM function automatically
+  // 3. Deploy the AI function automatically
   if (backend === 'api') return { deployOk: false, deployAttempted: false };
 
   const deploySpinner = ui.timedSpinner({ color: paintLime });
-  deploySpinner.start(t('add.llm_chat.deploying'));
+  deploySpinner.start(t('add.ai_chat.deploying'));
   try {
     if (backend === 'firebase') {
-      await execAsync('firebase deploy --only functions:llmChat', { cwd: projectDir, timeout: 180_000 });
+      await execAsync('firebase deploy --only functions:aiChat', { cwd: projectDir, timeout: 180_000 });
     } else if (backend === 'supabase') {
-      await execAsync(`supabase functions deploy llm-chat --no-verify-jwt${refFlag}`, { cwd: projectDir, timeout: 180_000 });
+      await execAsync(`supabase functions deploy ai-chat --no-verify-jwt${refFlag}`, { cwd: projectDir, timeout: 180_000 });
     }
-    deploySpinner.stop(t('add.llm_chat.deployed'));
+    deploySpinner.stop(t('add.ai_chat.deployed'));
     return { deployOk: true, deployAttempted: true };
   } catch {
-    deploySpinner.stop(`⚠ ${t('add.llm_chat.deployFailed')}`);
+    deploySpinner.stop(`⚠ ${t('add.ai_chat.deployFailed')}`);
     if (backend === 'firebase') {
-      ui.log.message(kleur.dim('Run manually: firebase deploy --only functions:llmChat'));
+      ui.log.message(kleur.dim('Run manually: firebase deploy --only functions:aiChat'));
     } else {
-      ui.log.message(kleur.dim(`Run manually: supabase functions deploy llm-chat --no-verify-jwt${refFlag}`));
+      ui.log.message(kleur.dim(`Run manually: supabase functions deploy ai-chat --no-verify-jwt${refFlag}`));
     }
     return { deployOk: false, deployAttempted: true };
   }
@@ -635,46 +648,46 @@ async function runAdd(module, options = {}) {
   // 3. Check if already active
   const activeModules = await getActiveModules(kitSetup, projectDir);
   if (activeModules.includes(normalized)) {
-    // llm_chat can be re-run to reconfigure credentials even when already active
-    if (normalized !== 'llm_chat') {
+    // ai_chat can be re-run to reconfigure credentials even when already active
+    if (normalized !== 'ai_chat') {
       printCompactHeader(t);
       ui.log.warn(t('add.alreadyActive', { module: normalized }));
       return;
     }
     printCompactHeader(t);
-    ui.intro(t('add.llm_chat.reconfigure'));
+    ui.intro(t('add.ai_chat.reconfigure'));
     // Skip to credential-only flow: prompt → postAdd → done
     const answers = {};
     if (!options.yes) {
-      for (const key of ['llmProvider', 'llmSystemPrompt', 'llmApiKey']) {
+      for (const key of ['aiProvider', 'aiSystemPrompt', 'aiApiKey']) {
         const ask = PROMPT_QUESTIONS[key];
         if (!ask) continue;
         answers[key] = (await ask(t, cancel)) ?? '';
       }
       if (kitSetup.backendProvider === 'api') {
-        answers.llmEndpoint = (await PROMPT_QUESTIONS.llmEndpoint(t, cancel)) || '';
+        answers.aiEndpoint = (await PROMPT_QUESTIONS.aiEndpoint(t, cancel)) || '';
       }
     }
-    const defines = MODULE_META.llm_chat.defineUpdates(answers, kitSetup);
+    const defines = MODULE_META.ai_chat.defineUpdates(answers, kitSetup);
     if (Object.keys(defines).length > 0) {
       await updateLaunchJson(projectDir, defines);
       await updateMakefile(projectDir, defines);
-      const envLines = MODULE_META.llm_chat.envLines(answers, kitSetup);
+      const envLines = MODULE_META.ai_chat.envLines(answers, kitSetup);
       if (envLines.length > 0) {
         await appendEnvExample(projectDir, envLines);
         await appendEnvFile(projectDir, envLines);
       }
     }
-    const { deployOk, deployAttempted } = await postAddLlmChat(projectDir, kitSetup, answers, t);
+    const { deployOk, deployAttempted } = await postAddAiChat(projectDir, kitSetup, answers, t);
     const backend = kitSetup?.backendProvider ?? 'firebase';
     const needsManualDeploy = deployAttempted && !deployOk;
     let nextStepsMsg;
     if (backend === 'firebase') {
-      nextStepsMsg = t(needsManualDeploy ? 'add.llm_chat.nextSteps.firebase.deployFailed' : 'add.llm_chat.nextSteps.firebase');
+      nextStepsMsg = t(needsManualDeploy ? 'add.ai_chat.nextSteps.firebase.deployFailed' : 'add.ai_chat.nextSteps.firebase');
     } else if (backend === 'supabase') {
-      nextStepsMsg = t(needsManualDeploy ? 'add.llm_chat.nextSteps.supabase.deployFailed' : 'add.llm_chat.nextSteps.supabase');
+      nextStepsMsg = t(needsManualDeploy ? 'add.ai_chat.nextSteps.supabase.deployFailed' : 'add.ai_chat.nextSteps.supabase');
     } else {
-      nextStepsMsg = t('add.llm_chat.nextSteps.api');
+      nextStepsMsg = t('add.ai_chat.nextSteps.api');
     }
     ui.outro(kleur.cyan(nextStepsMsg));
     return;
@@ -693,9 +706,9 @@ async function runAdd(module, options = {}) {
       if (!ask) continue;
       answers[key] = (await ask(t, cancel)) ?? '';
     }
-    // Extra prompt for API backend (custom LLM endpoint)
-    if (normalized === 'llm_chat' && kitSetup.backendProvider === 'api') {
-      answers.llmEndpoint = (await PROMPT_QUESTIONS.llmEndpoint(t, cancel)) || '';
+    // Extra prompt for API backend (custom AI endpoint)
+    if (normalized === 'ai_chat' && kitSetup.backendProvider === 'api') {
+      answers.aiEndpoint = (await PROMPT_QUESTIONS.aiEndpoint(t, cancel)) || '';
     }
   }
 
@@ -792,7 +805,7 @@ async function runAdd(module, options = {}) {
   }
 
   // 11. build_runner (only when needed: features with codegen)
-  const needsBuildRunner = ['revenuecat', 'analytics', 'sentry', 'onboarding', 'llm_chat', 'feedback'].includes(normalized);
+  const needsBuildRunner = ['revenuecat', 'analytics', 'sentry', 'onboarding', 'ai_chat', 'feedback'].includes(normalized);
   if (needsBuildRunner) {
     const spinner = ui.timedSpinner({ color: paintLime });
     spinner.start(t('add.buildRunner'));
@@ -804,10 +817,10 @@ async function runAdd(module, options = {}) {
     }
   }
 
-  // 12. LLM Chat: set secrets, write env vars, and deploy
-  let llmDeployResult = null;
-  if (normalized === 'llm_chat') {
-    llmDeployResult = await postAddLlmChat(projectDir, kitSetup, answers, t);
+  // 12. AI Chat: set secrets, write env vars, and deploy
+  let aiDeployResult = null;
+  if (normalized === 'ai_chat') {
+    aiDeployResult = await postAddAiChat(projectDir, kitSetup, answers, t);
   }
 
   // Show note if any
@@ -815,17 +828,17 @@ async function runAdd(module, options = {}) {
     ui.log.message(kleur.dim(t(meta.note)));
   }
 
-  // LLM Chat: show next steps (adjust based on whether deploy succeeded)
-  if (normalized === 'llm_chat') {
+  // AI Chat: show next steps (adjust based on whether deploy succeeded)
+  if (normalized === 'ai_chat') {
     const backend = kitSetup?.backendProvider ?? 'firebase';
-    const needsManualDeploy = llmDeployResult?.deployAttempted && !llmDeployResult?.deployOk;
+    const needsManualDeploy = aiDeployResult?.deployAttempted && !aiDeployResult?.deployOk;
     let nextStepsMsg;
     if (backend === 'firebase') {
-      nextStepsMsg = t(needsManualDeploy ? 'add.llm_chat.nextSteps.firebase.deployFailed' : 'add.llm_chat.nextSteps.firebase');
+      nextStepsMsg = t(needsManualDeploy ? 'add.ai_chat.nextSteps.firebase.deployFailed' : 'add.ai_chat.nextSteps.firebase');
     } else if (backend === 'supabase') {
-      nextStepsMsg = t(needsManualDeploy ? 'add.llm_chat.nextSteps.supabase.deployFailed' : 'add.llm_chat.nextSteps.supabase');
+      nextStepsMsg = t(needsManualDeploy ? 'add.ai_chat.nextSteps.supabase.deployFailed' : 'add.ai_chat.nextSteps.supabase');
     } else {
-      nextStepsMsg = t('add.llm_chat.nextSteps.api');
+      nextStepsMsg = t('add.ai_chat.nextSteps.api');
     }
     ui.log.info(nextStepsMsg);
   }

package/lib/commands/configure.js

@@ -99,14 +99,6 @@ const FEATURE_BLOCKS = [
         hint: 'Used on physical Android',
         validate: (v) => (/^goog_/.test(v) ? undefined : 'Must start with `goog_`'),
       },
-      {
-        key: 'RC_WEB_API_KEY',
-        destination: 'env',
-        label: 'RevenueCat — Web Billing (rcb_…)',
-        hint: 'Only if app has Web/PWA',
-        onlyIf: (kit) => !!kit.revenuecatWeb,
-        validate: (v) => (/^rcb_/.test(v) ? undefined : 'Must start with `rcb_`'),
-      },
       {
         key: 'RC_WEBHOOK_KEY',
         destination: 'firebaseSecret',
@@ -133,6 +125,40 @@ const FEATURE_BLOCKS = [
       },
     ],
   },
+  {
+    id: 'stripe',
+    titleKey: 'configure.section.stripe',
+    isActive: (kit) => !!kit.stripeModule,
+    fields: [
+      {
+        key: 'STRIPE_SECRET_KEY',
+        // firebase → Functions secret; supabase → edge function secret. Same
+        // command (`kasy configure stripe`) for both backends.
+        destination: (kit) => (kit.backendProvider === 'supabase' ? 'supabaseSecret' : 'firebaseSecret'),
+        label: 'Stripe — Secret Key (sk_…)',
+        hint: 'Server-side. Stripe Dashboard → Developers → API keys',
+        onlyIf: (kit) => kit.backendProvider !== 'api',
+        validate: (v) => (/^sk_/.test(v) ? undefined : 'Must start with `sk_`'),
+      },
+      {
+        key: 'STRIPE_WEBHOOK_SECRET',
+        destination: (kit) => (kit.backendProvider === 'supabase' ? 'supabaseSecret' : 'firebaseSecret'),
+        label: 'Stripe — Webhook Signing Secret (whsec_…)',
+        hint: 'Stripe → Developers → Webhooks → your endpoint → Signing secret',
+        onlyIf: (kit) => kit.backendProvider !== 'api',
+        validate: (v) => (/^whsec_/.test(v) ? undefined : 'Must start with `whsec_`'),
+      },
+      {
+        key: 'STRIPE_PRODUCT_ID',
+        // firebase reads it as a defineString (functions/.env); supabase as a secret.
+        destination: (kit) => (kit.backendProvider === 'supabase' ? 'supabaseSecret' : 'functionsEnv'),
+        label: 'Stripe — Product ID (prod_…, optional)',
+        hint: 'Limits the paywall to one product; blank lists all recurring prices',
+        onlyIf: (kit) => kit.backendProvider !== 'api',
+        validate: (v) => (!v || /^prod_/.test(v) ? undefined : 'Must start with `prod_`'),
+      },
+    ],
+  },
   {
     id: 'facebook',
     titleKey: 'configure.section.facebook',
@@ -155,26 +181,26 @@ const FEATURE_BLOCKS = [
     ],
   },
   {
-    id: 'llm_chat',
-    titleKey: 'configure.section.llmChat',
-    isActive: (kit, ctx) => !!ctx.hasLlmChat,
+    id: 'ai_chat',
+    titleKey: 'configure.section.aiChat',
+    isActive: (kit, ctx) => !!ctx.hasAiChat,
     fields: [
       {
-        key: 'LLM_PROVIDER',
+        key: 'AI_PROVIDER',
         destination: 'functionsEnv',
-        label: 'LLM Provider (openai or gemini)',
+        label: 'AI Provider (openai or gemini)',
         validate: (v) => (/^(openai|gemini)$/.test(v) ? undefined : 'Use openai or gemini'),
       },
       {
-        key: 'LLM_SYSTEM_PROMPT',
+        key: 'AI_SYSTEM_PROMPT',
         destination: 'functionsEnv',
-        label: 'LLM system prompt (instructions)',
+        label: 'AI system prompt (instructions)',
         validate: () => undefined,
       },
       {
-        key: 'LLM_API_KEY',
+        key: 'AI_API_KEY',
         destination: 'firebaseSecret',
-        label: 'LLM provider API key',
+        label: 'AI provider API key',
         hint: 'OpenAI dashboard → API keys, or Google AI Studio',
         onlyIf: (kit) => kit.backendProvider === 'firebase',
         validate: () => undefined,
@@ -344,12 +370,26 @@ async function setFirebaseSecret(projectDir, key, value, t) {
   }
 }
 
+async function setSupabaseSecret(projectDir, key, value) {
+  // execFile (no shell) so user-supplied values aren't interpolated. The project
+  // must be linked (done at `kasy new` for Supabase). `supabase secrets set`
+  // accepts KEY=VALUE as a positional arg.
+  const { execFile } = require('node:child_process');
+  const execFileAsync = promisify(execFile);
+  try {
+    await execFileAsync('supabase', ['secrets', 'set', `${key}=${value}`], { cwd: projectDir });
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err.stderr || err.message };
+  }
+}
+
 async function detectFeatureContext(projectDir) {
-  const ctx = { hasLlmChat: false };
+  const ctx = { hasAiChat: false };
   const featuresPath = path.join(projectDir, 'lib', 'core', 'config', 'features.dart');
   if (await fs.pathExists(featuresPath)) {
     const content = await fs.readFile(featuresPath, 'utf8');
-    if (/const bool withLlmChat\s*=\s*true/.test(content)) ctx.hasLlmChat = true;
+    if (/const bool withAiChat\s*=\s*true/.test(content)) ctx.hasAiChat = true;
   }
   return ctx;
 }
@@ -391,6 +431,13 @@ async function runConfigure(options = {}) {
     return;
   }
 
+  // Stripe on the API backend: the server is the user's own, so the CLI has no
+  // secret store to write to. Show clear guidance instead of prompting.
+  if (kit.backendProvider === 'api' && activeBlocks.some((b) => b.id === 'stripe')) {
+    ui.log.step(kleur.bold(t('configure.section.stripe')));
+    ui.log.message(kleur.dim(`– ${t('configure.stripe.apiNote')}`));
+  }
+
   // Facebook reads from both build files; cache once if the block is active.
   const facebookState = activeBlocks.some((b) => b.id === 'facebook')
     ? await readFacebookState(projectDir)
@@ -402,14 +449,15 @@ async function runConfigure(options = {}) {
     const items = [];
     for (const field of block.fields) {
       if (field.onlyIf && !field.onlyIf(kit, ctx)) continue;
+      const dest = typeof field.destination === 'function' ? field.destination(kit, ctx) : field.destination;
       let currentValue;
-      if (field.destination === 'env') currentValue = envState.get(field.key);
-      else if (field.destination === 'functionsEnv') currentValue = fnEnvState.get(field.key);
-      else if (field.destination === 'firebaseSecret') currentValue = undefined;
-      else if (field.destination === 'facebook') {
+      if (dest === 'env') currentValue = envState.get(field.key);
+      else if (dest === 'functionsEnv') currentValue = fnEnvState.get(field.key);
+      else if (dest === 'firebaseSecret' || dest === 'supabaseSecret') currentValue = undefined;
+      else if (dest === 'facebook') {
         currentValue = field.key === 'FB_APP_ID' ? facebookState?.appId : facebookState?.token;
       }
-      items.push({ field, filled: isFilled(currentValue) });
+      items.push({ field, dest, filled: isFilled(currentValue) });
     }
     if (items.length > 0) plan.push({ block, items });
   }
@@ -435,6 +483,7 @@ async function runConfigure(options = {}) {
   const envUpdates = new Map();
   const fnEnvUpdates = new Map();
   const secretUpdates = new Map();
+  const supabaseSecretUpdates = new Map();
   const facebookUpdates = {};
   let answeredCount = 0;
   let skippedCount = 0;
@@ -448,14 +497,15 @@ async function runConfigure(options = {}) {
     }
 
     ui.log.step(kleur.bold(t(block.titleKey)));
-    for (const { field, filled } of items) {
+    for (const { field, filled, dest } of items) {
       if (filled) {
         ui.log.message(kleur.dim(`  ✓ ${field.label} ${kleur.dim('— ' + t('configure.alreadyFilledShort'))}`));
         continue;
       }
-      const dst = field.destination === 'firebaseSecret' ? ' [Firebase Secret]'
-        : field.destination === 'functionsEnv' ? ' [functions/.env]'
-        : field.destination === 'facebook' ? ' [Info.plist + strings.xml]'
+      const dst = dest === 'firebaseSecret' ? ' [Firebase Secret]'
+        : dest === 'supabaseSecret' ? ' [Supabase Secret]'
+        : dest === 'functionsEnv' ? ' [functions/.env]'
+        : dest === 'facebook' ? ' [Info.plist + strings.xml]'
         : '';
       const value = await ui.text({
         message: `${field.label}${kleur.dim(dst)}`,
@@ -476,10 +526,11 @@ async function runConfigure(options = {}) {
         skippedCount++;
         continue;
       }
-      if (field.destination === 'env') envUpdates.set(field.key, trimmed);
-      else if (field.destination === 'functionsEnv') fnEnvUpdates.set(field.key, trimmed);
-      else if (field.destination === 'firebaseSecret') secretUpdates.set(field.key, trimmed);
-      else if (field.destination === 'facebook') {
+      if (dest === 'env') envUpdates.set(field.key, trimmed);
+      else if (dest === 'functionsEnv') fnEnvUpdates.set(field.key, trimmed);
+      else if (dest === 'firebaseSecret') secretUpdates.set(field.key, trimmed);
+      else if (dest === 'supabaseSecret') supabaseSecretUpdates.set(field.key, trimmed);
+      else if (dest === 'facebook') {
         if (field.key === 'FB_APP_ID') facebookUpdates.appId = trimmed;
         else if (field.key === 'FB_CLIENT_TOKEN') facebookUpdates.token = trimmed;
       }
@@ -530,6 +581,23 @@ async function runConfigure(options = {}) {
     }
   }
 
+  if (supabaseSecretUpdates.size > 0) {
+    const supaSpinner = ui.spinner();
+    supaSpinner.start(t('configure.settingSecrets', { count: supabaseSecretUpdates.size }));
+    let okCount = 0;
+    const failures = [];
+    for (const [key, value] of supabaseSecretUpdates) {
+      const result = await setSupabaseSecret(projectDir, key, value);
+      if (result.ok) okCount++;
+      else failures.push({ key, error: result.error });
+    }
+    supaSpinner.stop(t('configure.settingSecrets', { count: supabaseSecretUpdates.size }));
+    if (okCount > 0) ui.log.success(t('configure.savedSecrets', { count: okCount }));
+    for (const f of failures) {
+      ui.log.warn(`${t('configure.secretFailed', { key: f.key })}\n${kleur.dim((f.error || '').slice(0, 200))}`);
+    }
+  }
+
   const stillPending = totalPending - answeredCount;
   if (stillPending > 0) {
     ui.log.message(kleur.dim(`– ${t('configure.stillPending', { count: stillPending })}`));