kasy-cli 1.21.9 → 1.23.0

package/lib/commands/doctor.js

@@ -62,15 +62,16 @@ async function getActiveModules(kitSetup, projectDir) {
   if (kitSetup.analyticsProvider === 'mixpanel') modules.push('analytics');
   if (kitSetup.withFacebookPixel) modules.push('facebook');
   if (kitSetup.subscriptionModule) modules.push('revenuecat');
+  if (kitSetup.stripeModule) modules.push('stripe');
   if (kitSetup.withOnboarding) modules.push('onboarding');
   if (kitSetup.webCompat) modules.push('web');
   if (kitSetup.feedbackModule) modules.push('feedback');
 
-  // Read features.dart for llm_chat, widget
+  // Read features.dart for ai_chat, widget
   const featuresPath = path.join(projectDir, 'lib', 'core', 'config', 'features.dart');
   if (await fs.pathExists(featuresPath)) {
     const content = await fs.readFile(featuresPath, 'utf8');
-    if (/const bool withLlmChat\s*=\s*true/.test(content)) modules.push('llm_chat');
+    if (/const bool withAiChat\s*=\s*true/.test(content)) modules.push('ai_chat');
   }
 
   // Check ci by directory
@@ -114,6 +115,7 @@ async function runProjectChecks(projectDir, t, options = {}) {
 
   await runIosReleaseChecks(projectDir, t, options.language, config);
   await runRevenueCatChecks(projectDir, t, config);
+  await runStripeChecks(projectDir, t, config);
 }
 
 async function runIosReleaseChecks(projectDir, t, language, config = {}) {
@@ -249,6 +251,30 @@ async function runRevenueCatChecks(projectDir, t, config) {
   }
 }
 
+async function runStripeChecks(projectDir, t, config) {
+  if (!config.stripeModule) return;
+
+  ui.log.step(kleur.bold(t('doctor.stripe.title')));
+  ui.log.message(kleur.dim(`– ${t('doctor.stripe.serverSide')}`));
+
+  if (config.backendProvider === 'firebase') {
+    ui.log.message(kleur.dim(`– ${t('doctor.stripe.secretsFirebase')}`));
+    if (config.firebaseProjectId) {
+      const region = config.functionsRegion || 'us-central1';
+      const url = `https://${region}-${config.firebaseProjectId}.cloudfunctions.net/stripeFunctions-stripeWebhook`;
+      ui.log.success(`${t('doctor.stripe.webhookUrl')}:\n${kleur.cyan(url)}`);
+    }
+  } else if (config.backendProvider === 'supabase') {
+    ui.log.message(kleur.dim(`– ${t('doctor.stripe.secretsSupabase')}`));
+    if (config.supabaseProjectId) {
+      const url = `https://${config.supabaseProjectId}.supabase.co/functions/v1/stripe-webhook`;
+      ui.log.success(`${t('doctor.stripe.webhookUrl')}:\n${kleur.cyan(url)}`);
+    }
+  } else {
+    ui.log.message(kleur.dim(`– ${t('doctor.stripe.secretsApi')}`));
+  }
+}
+
 async function runDoctor(options = {}) {
   const language = options.language || detectDefaultLanguage();
   const t = createTranslator(language);

package/lib/commands/new.js

@@ -41,14 +41,14 @@ const KASY_AUDIENCE = process.env.KASY_INTERNAL === '1' ? 'internal' : 'public';
 const { generateFirebaseProject } = require('../scaffold/backends/firebase/generator');
 const { generateSupabaseProject } = require('../scaffold/backends/supabase/generator');
 const { generateApiProject } = require('../scaffold/backends/api/generator');
-const { createProjectAndGetKeys, setupLinkedProject, checkLoggedIn, getOrgsList, getProjectsByOrg, getProjectKeys } = require('../scaffold/backends/supabase/deploy');
+const { createProjectAndGetKeys, setupLinkedProject, checkLoggedIn, getOrgsList, getProjectsByOrg, getProjectKeys, classifyCreateError } = require('../scaffold/backends/supabase/deploy');
 const { writeSupabaseGoogleAuthOptions, readSupabaseGoogleCredentials, getGoogleClientSecretViaGcloud, flutterfireConfigure, writeGoogleAuthOptions, writeGoogleIosUrlScheme, writeGoogleIosUrlSchemeFromClientId } = require('../scaffold/shared/post-build');
 const { toPackageName } = require('../scaffold/backends/firebase/tokens');
 const { setupFromScratch, setupExistingProject, listBillingAccounts, listGcpOrganizations, checkGcloudAuth, getFirebaseAccount, getGcloudInstallInstructions, enableAuthProviders, ensureFirebaseAuthInitialized, registerDebugSha1 } = require('../scaffold/backends/firebase/setup-from-scratch');
 const { enableAuthViaFirebaseCli } = require('../scaffold/backends/firebase/enable-auth-via-cli');
 const { createFcmServiceAccountKey } = require('../scaffold/shared/fcm-service-account');
 
-// Região padrão para criação de projetos Supabase via API.
+// Default region for creating Supabase projects via the API.
 // Supabase regions: https://supabase.com/docs/guides/platform/regions
 const DEFAULT_SUPABASE_REGION = 'sa-east-1'; // São Paulo
 
@@ -383,6 +383,16 @@ function printSuccessCard(tr, answers, targetDir) {
 
   const lines = [];
 
+  // Show the app's bundle ID (Android applicationId / iOS bundle identifier) so
+  // the user knows exactly which identifier their project was created with — it's
+  // baked into the Android build, the iOS project and the Firebase app
+  // registration, and changing it later is a manual, multi-file operation.
+  if (answers.bundleId) {
+    lines.push(`📦 ${tr('new.success.bundleId')}: ${kleur.cyan(answers.bundleId)}`);
+    lines.push(kleur.dim(`   ${tr('new.success.bundleId.hint')}`));
+    lines.push('');
+  }
+
   if (answers.modules?.length > 0) {
     const byId = Object.fromEntries(FEATURE_CATALOG.map((f) => [f.id, f]));
     const visible = answers.modules.filter((id) => byId[id]);
@@ -693,9 +703,12 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
     if (!isQuick) ui.log.info(paintLime(`── ${tr(key)} ──`));
   };
 
-  // ── Bundle ID — Quick uses derived value silently; Step-by-step lets user override ─
+  // ── Bundle ID — asked in every interactive run (Quick included). It's baked into
+  // Android/iOS/Firebase and painful to change after the fact, so it's worth one
+  // Enter to confirm even in Quick (the field is pre-filled with the value derived
+  // from the app name). Only --yes (non-interactive) keeps the derived value silently.
   section('new.advanced.section.config');
-  if (!isQuick) {
+  if (!yes) {
     const bundleId = await ui.text({
       message: tr('new.firebase.q.bundleId'),
       placeholder: tr('new.firebase.q.bundleId.hint'),
@@ -1160,13 +1173,24 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
         core.supabaseAnonKey = supabaseCreateResult.supabaseAnonKey;
         ui.log.success(tr('new.supabase.created'));
       } else {
-        ui.log.error(`${tr('new.supabase.createFailed')}: ${supabaseCreateResult.error}`);
-        ui.log.message(tr('new.supabase.loginHint'));
+        // Tailor the message to WHY it failed, instead of always dumping the raw
+        // API string + a login hint that may be irrelevant.
+        const failKind = classifyCreateError(supabaseCreateResult.error);
+        if (failKind === 'free_limit') {
+          ui.log.error(tr('new.supabase.createFailed.freeLimit'));
+          ui.note(tr('new.supabase.freeLimit.options'), tr('new.supabase.freeLimit.title'));
+          ui.log.message(kleur.cyan('https://supabase.com/dashboard/projects'));
+        } else if (failKind === 'login') {
+          ui.log.error(`${tr('new.supabase.createFailed')}: ${supabaseCreateResult.error}`);
+          ui.log.message(tr('new.supabase.loginHint'));
+        } else {
+          ui.log.error(`${tr('new.supabase.createFailed')}: ${supabaseCreateResult.error}`);
+        }
         Object.assign(core, await promptSupabaseManual(tr, cancel));
         supabaseCreate = false;
       }
     } else {
-      // Usar projeto Supabase existente: org → projeto → keys → senha (mesmo fluxo de setup, sem criar)
+      // Use an existing Supabase project: org → project → keys → password (same setup flow, without creating)
       const loginCheck = await checkLoggedIn();
       if (!loginCheck.ok) {
         showLoginRequired();
@@ -1321,8 +1345,8 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
     // Visual groups in display order (header key → feature ids in this group)
     const groups = [
       { header: null,                              ids: ['sentry', 'analytics', 'facebook'] },
-      { header: 'new.modules.header.monetization', ids: ['revenuecat'] },
-      { header: 'new.modules.header.features',     ids: ['onboarding', 'web', 'widget', 'llm_chat', 'local_notifications'] },
+      { header: 'new.modules.header.monetization', ids: ['revenuecat', 'stripe'] },
+      { header: 'new.modules.header.features',     ids: ['onboarding', 'web', 'widget', 'ai_chat', 'local_reminders'] },
       { header: 'new.modules.header.feedback',     ids: ['feedback'] },
       { header: 'new.modules.header.ci',           ids: ['ci'] },
     ];
@@ -1371,7 +1395,7 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
   // philosophy. User can opt-in to enter everything inline if they prefer.
   let configureCredsNow = false;
   if (!isQuick) {
-    const FEATURES_WITH_CREDS = ['revenuecat', 'sentry', 'analytics', 'llm_chat', 'facebook'];
+    const FEATURES_WITH_CREDS = ['revenuecat', 'stripe', 'sentry', 'analytics', 'ai_chat', 'facebook'];
     if (modules.some((m) => FEATURES_WITH_CREDS.includes(m))) {
       section('new.advanced.section.creds');
       configureCredsNow = await ui.confirm({
@@ -1445,21 +1469,35 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
     }
   }
 
-  // RC web key — only when configuring inline. Otherwise mark scaffolded.
-  if (modules.includes('revenuecat') && modules.includes('web')) {
-    moduleAnswers.revenuecatWeb = true;
+  // Stripe (web payments) — server-side keys only. In quick/deferred mode they
+  // are configured later via `kasy configure stripe`. The app needs no Stripe
+  // client key (hosted Checkout). Keys are deployed to the backend, never baked
+  // into the app.
+  if (modules.includes('stripe')) {
     if (askCreds) {
-      const rcWebKey = await ui.text({
-        message: tr('new.firebase.q.revenuecat.webKey'),
+      moduleAnswers.stripeSecretKey = ((await ui.password({
+        message: tr('new.firebase.q.stripe.secretKey'),
+        onCancel: cancel,
+      })) || '').trim();
+      moduleAnswers.stripeWebhookSecret = ((await ui.text({
+        message: tr('new.firebase.q.stripe.webhookSecret'),
+        placeholder: tr('new.firebase.q.stripe.webhookSecret.hint'),
         validate: (v) => {
-          if (!v || !v.trim()) return undefined; // optional — blank is fine
-          return /^rcb_/.test(v.trim()) ? undefined : tr('new.firebase.q.revenuecat.webKey.invalid');
+          const s = (v || '').trim();
+          if (!s) return undefined; // optional — blank is fine
+          return /^whsec_/.test(s) ? undefined : tr('new.firebase.q.stripe.webhookSecret.invalid');
         },
         onCancel: cancel,
-      });
-      moduleAnswers.rcWebKey = (rcWebKey || '').trim();
+      })) || '').trim();
+      moduleAnswers.stripeProductId = ((await ui.text({
+        message: tr('new.firebase.q.stripe.productId'),
+        placeholder: tr('new.firebase.q.stripe.productId.hint'),
+        onCancel: cancel,
+      })) || '').trim();
     } else {
-      moduleAnswers.rcWebKey = '';
+      moduleAnswers.stripeSecretKey = '';
+      moduleAnswers.stripeWebhookSecret = '';
+      moduleAnswers.stripeProductId = '';
     }
   }
 
@@ -1485,11 +1523,11 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
     });
   }
 
-  // LLM Chat credentials.
-  if (modules.includes('llm_chat')) {
+  // AI Chat credentials.
+  if (modules.includes('ai_chat')) {
     if (askCreds) {
-      moduleAnswers.llmProvider = await ui.select({
-        message: tr('add.prompt.llmProvider'),
+      moduleAnswers.aiProvider = await ui.select({
+        message: tr('add.prompt.aiProvider'),
         initialValue: 'openai',
         options: [
           { value: 'openai', label: 'OpenAI (gpt-4o-mini)' },
@@ -1497,16 +1535,16 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
         ],
         onCancel: cancel,
       });
-      moduleAnswers.llmSystemPrompt = await ui.text({
-        message: tr('add.prompt.llmSystemPrompt'),
+      moduleAnswers.aiSystemPrompt = await ui.text({
+        message: tr('add.prompt.aiSystemPrompt'),
         onCancel: cancel,
       });
-      moduleAnswers.llmApiKey = await ui.password({
-        message: tr('add.prompt.llmApiKey'),
+      moduleAnswers.aiApiKey = await ui.password({
+        message: tr('add.prompt.aiApiKey'),
         onCancel: cancel,
       });
     } else {
-      moduleAnswers.llmConfigureLater = true;
+      moduleAnswers.aiConfigureLater = true;
     }
   }
 
@@ -1652,12 +1690,12 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
       await fs.writeJson(path.join(kasyDir, 'config.json'), { functionsRegion: firebaseRegion }, { spaces: 2 });
     } catch (_) {}
 
-    // Write functions/.env with LLM non-secret vars (provider + system prompt)
-    if (modules.includes('llm_chat') && !moduleAnswers.llmConfigureLater) {
+    // Write functions/.env with AI non-secret vars (provider + system prompt)
+    if (modules.includes('ai_chat') && !moduleAnswers.aiConfigureLater) {
       try {
         const envLines = [];
-        if (moduleAnswers.llmProvider) envLines.push(`LLM_PROVIDER=${moduleAnswers.llmProvider}`);
-        if (moduleAnswers.llmSystemPrompt?.trim()) envLines.push(`LLM_SYSTEM_PROMPT=${moduleAnswers.llmSystemPrompt.trim()}`);
+        if (moduleAnswers.aiProvider) envLines.push(`AI_PROVIDER=${moduleAnswers.aiProvider}`);
+        if (moduleAnswers.aiSystemPrompt?.trim()) envLines.push(`AI_SYSTEM_PROMPT=${moduleAnswers.aiSystemPrompt.trim()}`);
         if (envLines.length > 0) {
           await fs.ensureDir(path.join(targetDir, 'functions'));
           await fs.appendFile(path.join(targetDir, 'functions', '.env'), envLines.join('\n') + '\n', 'utf8');
@@ -1774,10 +1812,15 @@ async function runNew(directory, { language: langHint = null, backend: backendHi
             metaAccessToken: moduleAnswers.metaAccessToken,
             metaDatasetId: moduleAnswers.metaDatasetId,
           } : {}),
-          ...(answers.modules?.includes('llm_chat') && !moduleAnswers.llmConfigureLater ? {
-            llmApiKey: moduleAnswers.llmApiKey,
-            llmProvider: moduleAnswers.llmProvider,
-            llmSystemPrompt: moduleAnswers.llmSystemPrompt,
+          ...(answers.modules?.includes('ai_chat') && !moduleAnswers.aiConfigureLater ? {
+            aiApiKey: moduleAnswers.aiApiKey,
+            aiProvider: moduleAnswers.aiProvider,
+            aiSystemPrompt: moduleAnswers.aiSystemPrompt,
+          } : {}),
+          ...(answers.modules?.includes('stripe') ? {
+            stripeSecretKey: moduleAnswers.stripeSecretKey,
+            stripeWebhookSecret: moduleAnswers.stripeWebhookSecret,
+            stripeProductId: moduleAnswers.stripeProductId,
           } : {}),
         };
         const google = googleWebClientId && googleClientSecret

package/lib/commands/notifications.js

@@ -81,7 +81,7 @@ async function assertLocalNotificationsEnabled(projectDir, t) {
     throw new Error(t('notifications.error.noFeatures'));
   }
   const content = await fs.readFile(featuresPath, 'utf8');
-  if (!/const bool withLocalNotifications\s*=\s*true/.test(content)) {
+  if (!/const bool withLocalReminders\s*=\s*true/.test(content)) {
     throw new Error(t('notifications.error.notEnabled'));
   }
 }

package/lib/commands/remove.js

@@ -24,6 +24,7 @@ const {
   writeNoOpFeatureRequestRepository,
   writeMainDart,
   writeNoOpSubscriptionStubs,
+  writeStripeOnlySubscription,
   writeNoOpSentryUsages,
 } = require('../scaffold/shared/generator-utils');
 const { toPackageName } = require('../scaffold/backends/firebase/tokens');
@@ -49,8 +50,8 @@ const MODULE_DEPS = {
 const MODULE_DEFINES = {
   sentry:     ['SENTRY_DSN'],
   analytics:  ['MIXPANEL_TOKEN'],
-  revenuecat: ['RC_ANDROID_API_KEY', 'RC_IOS_API_KEY', 'RC_WEB_API_KEY'],
-  llm_chat:   ['LLM_CHAT_ENDPOINT'],
+  revenuecat: ['RC_ANDROID_API_KEY', 'RC_IOS_API_KEY'],
+  ai_chat:   ['AI_CHAT_ENDPOINT'],
 };
 
 /**
@@ -65,7 +66,6 @@ const MODULE_ENV_KEYS = {
     'RC_TEST_KEY',
     'RC_IOS_PROD_KEY',
     'RC_ANDROID_PROD_KEY',
-    'RC_WEB_API_KEY',
     // Legacy single-key format — only present in projects generated before
     // the test/prod split. Listed here so removal cleans them up too.
     'RC_ANDROID_API_KEY',
@@ -80,7 +80,8 @@ const MODULE_FEATURE_FLAGS = {
   onboarding: 'withOnboarding',
   web:        'withWeb',
   feedback:   'withFeedback',
-  llm_chat:   'withLlmChat',
+  ai_chat:   'withAiChat',
+  stripe:     'withStripe',
 };
 
 // ── Helpers ──────────────────────────────────────────────────────────────────
@@ -95,6 +96,7 @@ async function getActiveModules(kitSetup, projectDir) {
   if (kitSetup.analyticsProvider === 'mixpanel') modules.push('analytics');
   if (kitSetup.withFacebookPixel) modules.push('facebook');
   if (kitSetup.subscriptionModule) modules.push('revenuecat');
+  if (kitSetup.stripeModule) modules.push('stripe');
   if (kitSetup.withOnboarding) modules.push('onboarding');
   if (kitSetup.webCompat) modules.push('web');
   if (kitSetup.feedbackModule) modules.push('feedback');
@@ -102,7 +104,7 @@ async function getActiveModules(kitSetup, projectDir) {
   const featuresPath = path.join(projectDir, 'lib', 'core', 'config', 'features.dart');
   if (await fs.pathExists(featuresPath)) {
     const content = await fs.readFile(featuresPath, 'utf8');
-    if (/const bool withLlmChat\s*=\s*true/.test(content)) modules.push('llm_chat');
+    if (/const bool withAiChat\s*=\s*true/.test(content)) modules.push('ai_chat');
   }
 
   if (await fs.pathExists(path.join(projectDir, '.github', 'workflows'))) modules.push('ci');
@@ -226,9 +228,11 @@ function revertKitSetupFlag(config, module) {
     case 'facebook':
       config.withFacebookPixel = false;
       break;
+    case 'stripe':
+      config.stripeModule = false;
+      break;
     case 'revenuecat':
       config.subscriptionModule = false;
-      config.revenuecatWeb = false;
       break;
     case 'onboarding':
       config.withOnboarding = false;
@@ -239,7 +243,7 @@ function revertKitSetupFlag(config, module) {
     case 'feedback':
       config.feedbackModule = false;
       break;
-    case 'llm_chat':
+    case 'ai_chat':
     case 'widget':
     case 'ci':
       // Controlled by features.dart / patch — no kit_setup flag to revert
@@ -254,18 +258,33 @@ function revertKitSetupFlag(config, module) {
  * For modules whose stubs are regenerated (analytics, facebook, sentry),
  * no deletion is needed — the stub writer overwrites the file in-place.
  */
-async function removeModuleFiles(projectDir, module, backend) {
+async function removeModuleFiles(projectDir, module, backend, modulesAfterRemoval = []) {
   // Modules that have dedicated directories to remove
   const dirRemovals = {
-    llm_chat:   [path.join('lib', 'features', 'llm_chat')],
+    ai_chat:   [path.join('lib', 'features', 'ai_chat')],
     onboarding: [path.join('lib', 'features', 'onboarding')],
     widget:     [path.join('lib', 'core', 'home_widgets')],
-    revenuecat: [path.join('lib', 'features', 'subscription')],
+    // revenuecat/stripe: the subscription/ dir is SHARED by both payment modules
+    //   and is handled below (removed only when neither remains).
     // feedback: handled below (dir deleted, no-op stub recreated afterward)
     // ci: handled below (multiple top-level paths)
     // analytics/facebook/sentry: no dir — stub overwrites the file in place
   };
 
+  // The subscription/ core is shared by RevenueCat (mobile) and Stripe (web).
+  // Remove it only when NEITHER payment module remains. If the other one stays,
+  // keep the dir — the stub regeneration step (writeStripeOnlySubscription /
+  // no-op) reshapes it for the remaining module.
+  if (module === 'revenuecat' || module === 'stripe') {
+    const stillHasPayments =
+      modulesAfterRemoval.includes('revenuecat') || modulesAfterRemoval.includes('stripe');
+    if (!stillHasPayments) {
+      const subDir = path.join(projectDir, 'lib', 'features', 'subscriptions');
+      if (await fs.pathExists(subDir)) await fs.remove(subDir);
+    }
+    return;
+  }
+
   if (module === 'feedback') {
     // Delete the full feedbacks dir; writeNoOpFeatureRequestRepository recreates
     // only the repository stub (the rest of the UI/api code is gone).
@@ -295,9 +314,9 @@ async function removeModuleFiles(projectDir, module, backend) {
     if (await fs.pathExists(fullPath)) await fs.remove(fullPath);
   }
 
-  // LLM Chat on Supabase: also remove the copied edge function
-  if (module === 'llm_chat' && backend === 'supabase') {
-    const edgeFnPath = path.join(projectDir, 'supabase', 'functions', 'llm-chat');
+  // AI Chat on Supabase: also remove the copied edge function
+  if (module === 'ai_chat' && backend === 'supabase') {
+    const edgeFnPath = path.join(projectDir, 'supabase', 'functions', 'ai-chat');
     if (await fs.pathExists(edgeFnPath)) await fs.remove(edgeFnPath);
   }
 }
@@ -405,7 +424,7 @@ async function runRemove(module, options = {}) {
   }
 
   // 10. Remove files and directories added by the module's patch
-  await removeModuleFiles(projectDir, normalized, kitSetup.backendProvider);
+  await removeModuleFiles(projectDir, normalized, kitSetup.backendProvider, modulesAfterRemoval);
 
   // 11. Regenerate no-op stubs for the removed module
   const packageName = toPackageName(kitSetup.appName);
@@ -423,6 +442,15 @@ async function runRemove(module, options = {}) {
     await writeNoOpAdminHomeWidgets(projectDir).catch(() => {});
   }
   if (normalized === 'revenuecat') {
+    if (modulesAfterRemoval.includes('stripe')) {
+      // Both → Stripe-only: keep the core, strip the RevenueCat (purchases_flutter) files.
+      await writeStripeOnlySubscription(projectDir, packageName).catch(() => {});
+    } else {
+      await writeNoOpSubscriptionStubs(projectDir, packageName).catch(() => {});
+    }
+  }
+  if (normalized === 'stripe' && !modulesAfterRemoval.includes('revenuecat')) {
+    // Stripe-only → none: the dir was removed; write the no-op subscription stubs.
     await writeNoOpSubscriptionStubs(projectDir, packageName).catch(() => {});
   }
 
@@ -452,7 +480,7 @@ async function runRemove(module, options = {}) {
 
   // 14. build_runner (only for modules whose removal changes codegen inputs)
   const needsBuildRunner = [
-    'revenuecat', 'analytics', 'sentry', 'onboarding', 'llm_chat', 'feedback',
+    'revenuecat', 'analytics', 'sentry', 'onboarding', 'ai_chat', 'feedback',
   ].includes(normalized);
   if (needsBuildRunner) {
     const spinner = ui.timedSpinner();

package/lib/commands/run.js

@@ -319,8 +319,8 @@ async function runRun(directory, options = {}) {
 
   // Override RC keys based on device. We only touch RC_ANDROID_API_KEY /
   // RC_IOS_API_KEY when the launch.json already declares them — that's the
-  // signal the project uses RevenueCat. Web defines (RC_WEB_API_KEY) aren't
-  // touched here; they're already a single key.
+  // signal the project uses RevenueCat. Web payments use Stripe (server-side
+  // only), so there are no web dart-defines to touch here.
   const usesRc = dartDefines.some(
     (a) => a.startsWith('--dart-define=RC_ANDROID_API_KEY=') ||
            a.startsWith('--dart-define=RC_IOS_API_KEY='),

package/lib/commands/update.js

@@ -26,7 +26,7 @@ const execAsync = promisify(exec);
 const CHANGELOG_PATH = path.join(__dirname, '..', 'scaffold', 'CHANGELOG.json');
 
 const NEEDS_BUILD_RUNNER = [
-  'revenuecat', 'analytics', 'sentry', 'onboarding', 'llm_chat', 'feedback',
+  'revenuecat', 'analytics', 'sentry', 'onboarding', 'ai_chat', 'feedback',
 ];
 const COMPONENTS_UPDATE_TARGET = 'components';
 const CORE_UPDATE_TARGET = 'core';
@@ -129,7 +129,7 @@ async function getActiveModules(kitSetup, projectDir) {
   const featuresPath = path.join(projectDir, 'lib', 'core', 'config', 'features.dart');
   if (await fs.pathExists(featuresPath)) {
     const content = await fs.readFile(featuresPath, 'utf8');
-    if (/const bool withLlmChat\s*=\s*true/.test(content)) modules.push('llm_chat');
+    if (/const bool withAiChat\s*=\s*true/.test(content)) modules.push('ai_chat');
   }
   if (await fs.pathExists(path.join(projectDir, '.github', 'workflows'))) modules.push('ci');
   const pubspecPath = path.join(projectDir, 'pubspec.yaml');

package/lib/scaffold/CHANGELOG.json

@@ -1,4 +1,18 @@
 {
+  "1.22.0": {
+    "modules": {
+      "components": {
+        "pt": "Navegação repaginada para desktop/web: novo KasyWebHeader, KasySidebar e KasyBottomBar mais limpos e consistentes, com KasyAppBar se adaptando ao desktop.",
+        "en": "Revamped desktop/web navigation: new KasyWebHeader, cleaner and more consistent KasySidebar and KasyBottomBar, with KasyAppBar adapting to desktop.",
+        "es": "Navegación renovada para escritorio/web: nuevo KasyWebHeader, KasySidebar y KasyBottomBar más limpios y consistentes, con KasyAppBar adaptándose al escritorio."
+      },
+      "core": {
+        "pt": "Cor do texto sobre o accent (accentForeground) agora é automática: ela se ajusta sozinha pela luminância do accent (clara em accents escuros, escura em claros), então trocar a cor da marca continua legível em ambos os temas.",
+        "en": "Text color on top of the accent (accentForeground) is now automatic: it adapts to the accent's luminance (light on dark accents, dark on light ones), so changing the brand color stays legible in both themes.",
+        "es": "El color del texto sobre el accent (accentForeground) ahora es automático: se ajusta solo según la luminancia del accent (claro en accents oscuros, oscuro en claros), así cambiar el color de marca sigue siendo legible en ambos temas."
+      }
+    }
+  },
   "1.21.0": {
     "modules": {
       "components": {

package/lib/scaffold/backends/api/generator.js

@@ -1,22 +1,22 @@
 /**
  * API (REST) project generator.
  *
- * Wrapper fino sobre generateProject().
- * A lógica de geração comum (cópia, pub get, slang, build_runner, flutterfire)
- * vive em cli/lib/scaffold/generate.js.
+ * Thin wrapper over generateProject().
+ * The common generation logic (copy, pub get, slang, build_runner, flutterfire)
+ * lives in cli/lib/scaffold/generate.js.
  *
- * Hook específico (applyBackendSetup):
- *   1. Aplica api/patch/ sobre o template Firebase copiado
- *   2. Substitui pubspec.yaml pelo template API (pubspec.yaml.tpl)
- *   3. Remove artefatos Firebase exclusivos (feedbacks mantido — patch substitui as APIs)
- *   4. Escreve overrides de environment (apiBaseUrl)
+ * Specific hook (applyBackendSetup):
+ *   1. Applies api/patch/ over the copied Firebase template
+ *   2. Replaces pubspec.yaml with the API template (pubspec.yaml.tpl)
+ *   3. Removes Firebase-only artifacts (feedbacks kept — the patch replaces the APIs)
+ *   4. Writes environment overrides (apiBaseUrl)
  */
 
 const path = require('node:path');
 const fs = require('fs-extra');
 const { applyPatch } = require('../../engine');
 const { generateProject } = require('../../generate');
-const { writeEnvironnementsOverrides } = require('../../shared/generator-utils');
+const { writeEnvironmentsOverrides } = require('../../shared/generator-utils');
 const { removeBackendSpecificArtifacts } = require('../../shared/backend-config');
 
 const API_PATCH_DIR = path.join(__dirname, 'patch');
@@ -34,7 +34,7 @@ async function generateApiProject(targetDir, options) {
       // 1. Patch API (auth via HTTP, storage null, notifications via REST)
       const { filesApplied } = await applyPatch(API_PATCH_DIR, dir, tokens, pathReplacements);
 
-      // 1b. README do backend (excluído do applyPatch) — copiar manualmente
+      // 1b. Backend README (excluded from applyPatch) — copy it manually
       const language = opts.language ?? 'pt';
       const readmeLang = ['en', 'pt', 'es'].includes(language) ? language : 'en';
       const candidates = [
@@ -48,7 +48,7 @@ async function generateApiProject(targetDir, options) {
         }
       }
 
-      // 2. Substituir pubspec.yaml pelos deps do API backend
+      // 2. Replace pubspec.yaml with the API backend deps
       const pubspecContent = await fs.readFile(API_PUBSPEC, 'utf8');
       let pubspecReplaced = pubspecContent;
       for (const [from, to] of Object.entries(tokens)) {
@@ -56,11 +56,11 @@ async function generateApiProject(targetDir, options) {
       }
       await fs.outputFile(path.join(dir, 'pubspec.yaml'), pubspecReplaced, 'utf8');
 
-      // 3. Remover artefatos exclusivos do Firebase (feedbacks é mantido — patch API substitui as APIs)
+      // 3. Remove Firebase-only artifacts (feedbacks kept — the API patch replaces the APIs)
       await removeBackendSpecificArtifacts(dir, 'api', opts.modules ?? []);
 
-      // 4. Escrever overrides de environment com a URL da API
-      await writeEnvironnementsOverrides(dir, 'api', tokens, { apiBaseUrl: opts.apiBaseUrl });
+      // 4. Write environment overrides with the API URL
+      await writeEnvironmentsOverrides(dir, 'api', tokens, { apiBaseUrl: opts.apiBaseUrl });
 
       return {
         detail: `${filesApplied} patch files`,

package/lib/scaffold/backends/api/patch/README.md

@@ -79,6 +79,89 @@ Após editar qualquer `.i18n.json`, sempre rodar `dart run slang`.
 
 ---
 
+## Admin (console interno)
+
+O app tem um **console de admin** (aba Usuários, Solicitações, etc.) liberado só para quem tem `role == "admin"`. O `role` é um campo de **controle de acesso** que o **seu backend controla** — o app nunca pode escrever nele.
+
+### Campo `role` no usuário
+
+O seu endpoint de usuário (`GET /users/{id}`) deve devolver o `role` junto com os outros dados:
+
+```json
+{ "id": "...", "email": "ana@b.com", "name": "Ana", "onboarded": true, "role": "admin" }
+```
+
+- `role` ausente / `null` → usuário normal.
+- `role: "admin"` → libera o console de admin.
+
+**Regra de segurança (obrigatória):** o `role` só pode ser definido no servidor (banco/painel). O backend deve **rejeitar** qualquer tentativa do cliente de gravar `role` (ex.: num `PATCH /users/{id}`), senão qualquer pessoa vira admin. Defina-o manualmente no seu banco para promover alguém.
+
+### Endpoint: listar usuários
+
+```
+GET /admin/users
+  Auth: Authorization: Bearer <token>   (enviado automaticamente pelo app)
+  O servidor DEVE validar role == "admin" e responder 403 caso contrário.
+
+  200 OK:
+  {
+    "users": [
+      {
+        "id": "...",
+        "email": "ana@b.com" | null,
+        "name": "Ana" | null,
+        "createdAt": 1700000000000,   // epoch em milissegundos | null
+        "subscriber": true            // tem assinatura ativa?
+      }
+    ],
+    "totalUsers": 142,   // tamanho real da coleção
+    "truncated": false   // true quando há mais usuários do que os retornados
+  }
+```
+
+Devolva os usuários **mais recentes** (com um limite, ex.: 1000). O app faz busca, ordenação e paginação localmente — por isso uma chamada só já basta e a experiência fica instantânea.
+
+### Endpoint: moderar solicitações (aba Solicitações)
+
+```
+GET   /admin/feature-requests        → lista TODAS (ativas + ocultas), mais votadas primeiro
+PATCH /admin/feature-requests/{id}   body: {"active": true|false}
+PATCH /admin/feature-requests/{id}   body: {"title": {...}, "description": {...}}
+```
+
+Mesma regra: validar `role == "admin"` e responder 403 caso contrário. `title`/`description` são mapas por idioma (`{"en": "...", "pt": "...", "es": "..."}`).
+
+### Endpoints: AI Chat (histórico de conversas)
+
+O assistente guarda várias conversas por usuário, cada uma com várias mensagens.
+O usuário é identificado pelo token `Authorization: Bearer`.
+
+```
+GET    /ai-conversations                  → lista as conversas do usuário, mais recente primeiro
+POST   /ai-conversations                  → cria uma conversa vazia e devolve o objeto criado
+DELETE /ai-conversations/{id}             → apaga a conversa e todas as mensagens dela
+GET    /ai-conversations/{id}/messages    → mensagens da conversa, mais antiga primeiro
+POST   /ai-conversations/{id}/messages    body: {"role": "...", "content": "...", "created_at": "..."}
+```
+
+Formato de uma conversa (o "última mensagem" é desnormalizado para a lista ficar barata):
+
+```json
+{
+  "id": "...",
+  "created_at": "2026-01-01T12:00:00Z",
+  "updated_at": "2026-01-01T12:05:00Z",
+  "last_message_role": "user" | "assistant" | null,
+  "last_message_content": "..." | null
+}
+```
+
+Ao salvar uma mensagem, o servidor deve atualizar `updated_at`, `last_message_role` e
+`last_message_content` da conversa. O streaming da resposta da IA continua no endpoint
+`AI_CHAT_ENDPOINT` (SSE) — ele só recebe `message` + `history`, não persiste nada.
+
+---
+
 ## Segurança
 
 O `.gitignore` já exclui: `.env`, `.env.*`, `*.pem`, `*.keystore`.