superslate 0.9.0 → 0.10.0

package/dist/cli.js

@@ -1266,20 +1266,31 @@ var LICENSE_KEY_VARIABLE2 = "SUPERSLATE_LICENSE_KEY";
 var LICENSE_KEY_PREFIX = "SUPERSLATE-";
 
 // src/core.ts
+var KEBAB_CASE_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var WHITESPACE_CHAR_RE = /\s/;
+var NPM_SCOPE_RE = /^@[a-z0-9][a-z0-9._-]*$/;
+var NEWLINE_CHAR_RE = /\r|\n/;
+var BRAND_NAME_RE = /^[\p{L}\p{N}](?:[\p{L}\p{N} ._-]*[\p{L}\p{N}])?$/u;
+var REGEX_SPECIAL_CHARS_RE = /[.*+?^${}()|[\]\\]/g;
+var ESCAPED_SOURCE_BRAND = SOURCE_BRAND_NAME.replace(REGEX_SPECIAL_CHARS_RE, "\\$&");
+var SOURCE_BRAND_RE = new RegExp(`\\b${ESCAPED_SOURCE_BRAND}\\b`, "gi");
+var ESCAPED_CLI_NAME = CLI_NAME2.replace(REGEX_SPECIAL_CHARS_RE, "\\$&");
+var SOURCE_DELIVERY_GUIDANCE_RE = new RegExp(`pnpm dlx ${ESCAPED_CLI_NAME}|bunx ${ESCAPED_CLI_NAME}|${ESCAPED_CLI_NAME} repository`, "i");
+var VENDOR_BOOTSTRAPPER_GUIDANCE_RE = new RegExp(`${ESCAPED_CLI_NAME}@\\d|public \`${ESCAPED_CLI_NAME}\` npm package`, "i");
 function validateAppName(value) {
   if (!value)
     return "App name is required.";
-  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(value)) {
+  if (!KEBAB_CASE_RE.test(value)) {
     return "App name must be kebab-case (lowercase letters, numbers, and single hyphens).";
   }
   return;
 }
 function normalizeScope(value) {
   const scope = value.startsWith("@") ? value : `@${value}`;
-  if (/\s/.test(scope)) {
+  if (WHITESPACE_CHAR_RE.test(scope)) {
     throw new Error("Use hyphens instead of spaces, for example test-package.");
   }
-  if (!/^@[a-z0-9][a-z0-9._-]*$/.test(scope)) {
+  if (!NPM_SCOPE_RE.test(scope)) {
     throw new Error("Use lowercase letters and numbers, with optional periods, underscores, or hyphens.");
   }
   return scope;
@@ -1287,13 +1298,13 @@ function normalizeScope(value) {
 function validateBrandName(value) {
   if (!value.trim())
     return "Brand name cannot be empty.";
-  if (/\r|\n/.test(value))
+  if (NEWLINE_CHAR_RE.test(value))
     return "Brand name must fit on one line.";
   if (value !== value.trim())
     return "Brand name cannot start or end with whitespace.";
   if (value.length > 48)
     return "Brand name must be 48 characters or less.";
-  if (!/^[\p{L}\p{N}](?:[\p{L}\p{N} ._-]*[\p{L}\p{N}])?$/u.test(value)) {
+  if (!BRAND_NAME_RE.test(value)) {
     return "Brand name may contain letters, numbers, spaces, periods, underscores, and hyphens.";
   }
   return;
@@ -1303,12 +1314,43 @@ var SCOPE_EXTENSIONS = new Set([".json", ".jsonc", ".md", ".ts", ".tsx", ".yaml"
 // src/core.ts
 import { randomBytes } from "node:crypto";
 import { extname } from "node:path";
+var KEBAB_CASE_RE2 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var WHITESPACE_CHAR_RE2 = /\s/;
+var NPM_SCOPE_RE2 = /^@[a-z0-9][a-z0-9._-]*$/;
+var NEWLINE_CHAR_RE2 = /\r|\n/;
+var BRAND_NAME_RE2 = /^[\p{L}\p{N}](?:[\p{L}\p{N} ._-]*[\p{L}\p{N}])?$/u;
+var REGEX_SPECIAL_CHARS_RE2 = /[.*+?^${}()|[\]\\]/g;
+var NON_ALPHANUMERIC_CHAR_RE = /[^a-z0-9]/g;
+var LEADING_DIGIT_RE = /^[0-9]/;
+var HTTP_PROTOCOL_RE = /^https?:\/\//;
+var APP_DOMAIN_RE = /^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$/;
+var BUNDLE_IDENTIFIER_RE = /^[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*){2,}$/;
+var MOBILE_APP_SCHEME_LINE_RE = /^MOBILE_APP_SCHEME=.*$/m;
+var MOBILE_DOCS_SOURCE_LINE_RE = /^\s*'mobile\.md',\n/m;
+var MOBILE_EDITION_SECTION_RE = /^## Mobile edition\n[\s\S]*?(?=^## |(?![\s\S]))/m;
+var MOBILE_TABLE_ROW_RE = /^\| `apps\/mobile` .*\n/gm;
+var MOBILE_PARAGRAPH_RE = /^`apps\/mobile`[\s\S]*?(?:\n\n|\n?(?![\s\S]))/gm;
+var MOBILE_DOCS_LINK_RE = /\[([^\]]+)\]\(\.\/mobile\.md(?:#[^)]*)?\)/g;
+var NAMED_IMPORT_LINE_RE = /^(\s*)(import(?:\s+type)?\s+)\{([^}]+)\}(\s+from\s+.+)$/;
+var WHITESPACE_RE = /\s+/;
+var INTERNAL_AGENT_REFERENCE_RE = /internal\/|landing\/|seller-surface|studio-owned/i;
+var INTERNAL_CLAUDE_REFERENCE_RE = /internal\/|landing\/|studio-owned/i;
+var BETTER_AUTH_SECRET_LINE_RE = /^BETTER_AUTH_SECRET=.*$/m;
+var HEX_64_RE = /^[a-f0-9]{64}$/;
+var DATABASE_URL_LINE_RE = /^DATABASE_URL=.*$/m;
+var GHA_CREDS_FILE_RE = /^gha-creds-.*\.json$/;
+var ESCAPED_SOURCE_BRAND2 = SOURCE_BRAND_NAME.replace(REGEX_SPECIAL_CHARS_RE2, "\\$&");
+var SOURCE_BRAND_RE2 = new RegExp(`\\b${ESCAPED_SOURCE_BRAND2}\\b`, "gi");
+var ESCAPED_CLI_NAME2 = CLI_NAME2.replace(REGEX_SPECIAL_CHARS_RE2, "\\$&");
+var SOURCE_DELIVERY_GUIDANCE_RE2 = new RegExp(`pnpm dlx ${ESCAPED_CLI_NAME2}|bunx ${ESCAPED_CLI_NAME2}|${ESCAPED_CLI_NAME2} repository`, "i");
+var VENDOR_BOOTSTRAPPER_GUIDANCE_RE2 = new RegExp(`${ESCAPED_CLI_NAME2}@\\d|public \`${ESCAPED_CLI_NAME2}\` npm package`, "i");
 var BRAND_MANIFEST = [
   { path: "apps/web/src/configs/config.ts", occurrences: 2 },
   { path: "apps/web/index.html", occurrences: 4 },
   { path: "apps/web/public/favicon/site.webmanifest", occurrences: 2 },
   { path: "apps/web/public/offline.html", occurrences: 6 },
   { path: "apps/docs/lib/shared.ts", occurrences: 1 },
+  { path: "apps/site/src/site.ts", occurrences: 1 },
   { path: "apps/docs/README.md", occurrences: 1 },
   { path: "README.md", occurrences: 1 },
   { path: "docs/meta.json", occurrences: 1 },
@@ -1351,17 +1393,17 @@ var UNIVERSAL_LINK_PATH_PREFIXES = ["/auth", "/invitations"];
 function validateAppName2(value) {
   if (!value)
     return "App name is required.";
-  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(value)) {
+  if (!KEBAB_CASE_RE2.test(value)) {
     return "App name must be kebab-case (lowercase letters, numbers, and single hyphens).";
   }
   return;
 }
 function normalizeScope2(value) {
   const scope = value.startsWith("@") ? value : `@${value}`;
-  if (/\s/.test(scope)) {
+  if (WHITESPACE_CHAR_RE2.test(scope)) {
     throw new Error("Use hyphens instead of spaces, for example test-package.");
   }
-  if (!/^@[a-z0-9][a-z0-9._-]*$/.test(scope)) {
+  if (!NPM_SCOPE_RE2.test(scope)) {
     throw new Error("Use lowercase letters and numbers, with optional periods, underscores, or hyphens.");
   }
   return scope;
@@ -1369,13 +1411,13 @@ function normalizeScope2(value) {
 function validateBrandName2(value) {
   if (!value.trim())
     return "Brand name cannot be empty.";
-  if (/\r|\n/.test(value))
+  if (NEWLINE_CHAR_RE2.test(value))
     return "Brand name must fit on one line.";
   if (value !== value.trim())
     return "Brand name cannot start or end with whitespace.";
   if (value.length > 48)
     return "Brand name must be 48 characters or less.";
-  if (!/^[\p{L}\p{N}](?:[\p{L}\p{N} ._-]*[\p{L}\p{N}])?$/u.test(value)) {
+  if (!BRAND_NAME_RE2.test(value)) {
     return "Brand name may contain letters, numbers, spaces, periods, underscores, and hyphens.";
   }
   return;
@@ -1393,13 +1435,11 @@ function rewriteBrandContent(content, brandName) {
   const error = validateBrandName2(brandName);
   if (error)
     throw new Error(error);
-  const escapedSourceBrand = SOURCE_BRAND_NAME.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const sourceBrandPattern = new RegExp(`\\b${escapedSourceBrand}\\b`, "gi");
-  const matches = content.match(sourceBrandPattern);
+  const matches = content.match(SOURCE_BRAND_RE2);
   if (brandName === SOURCE_BRAND_NAME || !matches)
     return { content, replacements: 0 };
   return {
-    content: content.replace(sourceBrandPattern, () => brandName),
+    content: content.replace(SOURCE_BRAND_RE2, () => brandName),
     replacements: matches.length
   };
 }
@@ -1410,17 +1450,17 @@ function mobileSchemeFor(appName) {
   return appName;
 }
 function androidPackageSegment(appName) {
-  const segment = appName.replace(/[^a-z0-9]/g, "");
-  return /^[0-9]/.test(segment) || !segment ? `app${segment}` : segment;
+  const segment = appName.replace(NON_ALPHANUMERIC_CHAR_RE, "");
+  return LEADING_DIGIT_RE.test(segment) || !segment ? `app${segment}` : segment;
 }
 function validateAppDomain(value) {
   if (!value.trim())
     return "Application domain cannot be empty.";
-  if (/^https?:\/\//.test(value))
+  if (HTTP_PROTOCOL_RE.test(value))
     return "Use a bare host such as app.example.com, not a URL.";
   if (value.includes("/"))
     return "Use a bare host such as app.example.com, with no path.";
-  if (!/^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$/.test(value)) {
+  if (!APP_DOMAIN_RE.test(value)) {
     return "Use a lowercase hostname with at least two labels, for example app.example.com.";
   }
   return;
@@ -1428,7 +1468,7 @@ function validateAppDomain(value) {
 function validateBundleIdentifier(value) {
   if (!value.trim())
     return "Bundle identifier cannot be empty.";
-  if (!/^[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*){2,}$/.test(value)) {
+  if (!BUNDLE_IDENTIFIER_RE.test(value)) {
     return "Use at least three lowercase reverse-DNS segments, for example com.example.app.";
   }
   return;
@@ -1505,11 +1545,11 @@ function rewriteMobileAppConfig(content, identity) {
 `;
 }
 function rewriteMobileAppScheme(content, scheme) {
-  if (!/^MOBILE_APP_SCHEME=.*$/m.test(content)) {
+  if (!MOBILE_APP_SCHEME_LINE_RE.test(content)) {
     throw new Error("Server .env.example must contain a MOBILE_APP_SCHEME entry.");
   }
   return {
-    content: content.replace(/^MOBILE_APP_SCHEME=.*$/m, `MOBILE_APP_SCHEME=${scheme}`),
+    content: content.replace(MOBILE_APP_SCHEME_LINE_RE, `MOBILE_APP_SCHEME=${scheme}`),
     replacements: 1
   };
 }
@@ -1574,10 +1614,10 @@ function stripMobileDocsPage(content) {
 `;
 }
 function stripMobileDocsSource(content) {
-  return content.replace(/^\s*'mobile\.md',\n/m, "");
+  return content.replace(MOBILE_DOCS_SOURCE_LINE_RE, "");
 }
 function stripMobileDocsReferences(content) {
-  return content.replace(/^## Mobile edition\n[\s\S]*?(?=^## |(?![\s\S]))/m, "").replace(/^\| `apps\/mobile` .*\n/gm, "").replace(/^`apps\/mobile`[\s\S]*?(?:\n\n|\n?(?![\s\S]))/gm, "").replace(/\[([^\]]+)\]\(\.\/mobile\.md(?:#[^)]*)?\)/g, "$1");
+  return content.replace(MOBILE_EDITION_SECTION_RE, "").replace(MOBILE_TABLE_ROW_RE, "").replace(MOBILE_PARAGRAPH_RE, "").replace(MOBILE_DOCS_LINK_RE, "$1");
 }
 function formatRewrittenPackageJson(content) {
   const parsed = JSON.parse(content);
@@ -1600,7 +1640,7 @@ function wrapLongNamedImports(content, width = 100) {
 `).map((line) => {
     if (line.length <= width)
       return line;
-    const match = line.match(/^(\s*)(import(?:\s+type)?\s+)\{([^}]+)\}(\s+from\s+.+)$/);
+    const match = line.match(NAMED_IMPORT_LINE_RE);
     if (!match)
       return line;
     const [, indentation = "", prefix = "", names = "", suffix = ""] = match;
@@ -1644,7 +1684,7 @@ function wrapBrandedJsxText(content, brandName, width = 100) {
       continue;
     }
     let current = indentation;
-    for (const word of joined.split(/\s+/)) {
+    for (const word of joined.split(WHITESPACE_RE)) {
       const candidate = current === indentation ? `${indentation}${word}` : `${current} ${word}`;
       if (candidate.length > width && current !== indentation) {
         output.push(current);
@@ -1682,6 +1722,16 @@ function rewriteWorkerName(content, appName) {
     return { content, replacements: 0 };
   return { content: content.replace(WORKER_NAME_DECLARATION, replacement), replacements: 1 };
 }
+var JSONC_WORKER_NAME_FIELD = /("name":\s*")[^"]*(")/;
+function rewriteSiteWorkerName(content, appName) {
+  const error = validateAppName2(appName);
+  if (error)
+    throw new Error(error);
+  if (!JSONC_WORKER_NAME_FIELD.test(content)) {
+    throw new Error("The site Worker configuration is missing a name field.");
+  }
+  return content.replace(JSONC_WORKER_NAME_FIELD, `$1${appName}-site$2`);
+}
 function replaceMarkdownSection(content, heading, replacement) {
   const marker = `## ${heading}
 `;
@@ -1711,7 +1761,7 @@ function removeParagraphContaining(content, fragment) {
 `);
 }
 function rewriteBuyerAgentInstructions(content) {
-  if (content.includes("Audit and remediate the complete buyer-owned SaaS application") && !/internal\/|landing\/|seller-surface|studio-owned/i.test(content)) {
+  if (content.includes("Audit and remediate the complete buyer-owned SaaS application") && !INTERNAL_AGENT_REFERENCE_RE.test(content)) {
     return content;
   }
   let rewritten = removeParagraphContaining(content, "`internal/` holds every seller-only surface");
@@ -1729,7 +1779,7 @@ into this repository.
   rewritten = rewritten.split(`
 `).filter((line) => !line.includes("| `internal`")).join(`
 `).replace("real env files, `internal/`, or\n  `bun.lock`", "real env files, or `bun.lock`");
-  if (/internal\/|landing\/|seller-surface|studio-owned/i.test(rewritten)) {
+  if (INTERNAL_AGENT_REFERENCE_RE.test(rewritten)) {
     throw new Error("Buyer agent instructions still contain seller-only guidance.");
   }
   return rewritten;
@@ -1793,10 +1843,10 @@ function stripSellerOnlyRootScripts(content) {
 `;
 }
 function rewriteBuyerClaudeInstructions(content) {
-  if (!/internal\/|landing\/|studio-owned/i.test(content))
+  if (!INTERNAL_CLAUDE_REFERENCE_RE.test(content))
     return content;
   const rewritten = removeParagraphContaining(content, "`internal/landing/AGENTS.md`");
-  if (/internal\/|landing\/|studio-owned/i.test(rewritten)) {
+  if (INTERNAL_CLAUDE_REFERENCE_RE.test(rewritten)) {
     throw new Error("Buyer Claude instructions still contain seller-only guidance.");
   }
   return rewritten;
@@ -1805,8 +1855,7 @@ function rewriteBuyerSetupInstructions(content) {
   if (!content.includes("## Create a product repository"))
     return content;
   const rewritten = replaceMarkdownSection(content, "Create a product repository", "");
-  const escapedCliName = CLI_NAME2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  if (new RegExp(`pnpm dlx ${escapedCliName}|bunx ${escapedCliName}|${escapedCliName} repository`, "i").test(rewritten)) {
+  if (SOURCE_DELIVERY_GUIDANCE_RE2.test(rewritten)) {
     throw new Error("Buyer setup instructions still contain source-delivery guidance.");
   }
   return rewritten;
@@ -1815,30 +1864,29 @@ function rewriteBuyerReleaseInstructions(content) {
   if (!content.includes("## npm bootstrapper"))
     return content;
   const rewritten = replaceMarkdownSection(content, "npm bootstrapper", "");
-  const escapedCliName = CLI_NAME2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  if (new RegExp(`${escapedCliName}@\\d|public \`${escapedCliName}\` npm package`, "i").test(rewritten)) {
+  if (VENDOR_BOOTSTRAPPER_GUIDANCE_RE2.test(rewritten)) {
     throw new Error("Buyer release instructions still contain vendor bootstrapper guidance.");
   }
   return rewritten;
 }
 function generateStartDevVars(example, secret = randomBytes(32).toString("base64")) {
-  if (!/^BETTER_AUTH_SECRET=.*$/m.test(example)) {
+  if (!BETTER_AUTH_SECRET_LINE_RE.test(example)) {
     throw new Error("apps/start/.dev.vars.example must contain a BETTER_AUTH_SECRET entry.");
   }
-  return example.replace(/^BETTER_AUTH_SECRET=.*$/m, `BETTER_AUTH_SECRET=${secret}`);
+  return example.replace(BETTER_AUTH_SECRET_LINE_RE, `BETTER_AUTH_SECRET=${secret}`);
 }
 function generateServerEnv(example, secret = randomBytes(32).toString("hex"), databasePort = 5432) {
-  if (!/^[a-f0-9]{64}$/.test(secret)) {
+  if (!HEX_64_RE.test(secret)) {
     throw new Error("Better Auth secret must be 32 bytes encoded as hex.");
   }
-  if (!/^DATABASE_URL=.*$/m.test(example) || !/^BETTER_AUTH_SECRET=.*$/m.test(example)) {
+  if (!DATABASE_URL_LINE_RE.test(example) || !BETTER_AUTH_SECRET_LINE_RE.test(example)) {
     throw new Error("Server .env.example must contain DATABASE_URL and BETTER_AUTH_SECRET entries.");
   }
   if (!Number.isInteger(databasePort) || databasePort < 1 || databasePort > 65535) {
     throw new Error("Database port must be an integer between 1 and 65535.");
   }
   const databaseUrl = `postgresql://app:app@localhost:${databasePort}/app?sslmode=disable`;
-  return example.replace(/^DATABASE_URL=.*$/m, `DATABASE_URL=${databaseUrl}`).replace(/^BETTER_AUTH_SECRET=.*$/m, `BETTER_AUTH_SECRET=${secret}`);
+  return example.replace(DATABASE_URL_LINE_RE, `DATABASE_URL=${databaseUrl}`).replace(BETTER_AUTH_SECRET_LINE_RE, `BETTER_AUTH_SECRET=${secret}`);
 }
 var SCOPE_EXTENSIONS2 = new Set([".json", ".jsonc", ".md", ".ts", ".tsx", ".yaml", ".yml"]);
 function isScopeRewriteFile(path) {
@@ -1871,7 +1919,7 @@ function isTemplatePathExcluded(relativePath) {
     if ([".expo", "android", "ios", "credentials", "dist-verify"].includes(mobileEntry))
       return true;
   }
-  if (parts.includes(".wrangler"))
+  if (parts.includes(".wrangler") || parts.includes(".astro"))
     return true;
   if (parts.includes("dist") || parts.includes("out"))
     return true;
@@ -1883,7 +1931,7 @@ function isTemplatePathExcluded(relativePath) {
     return true;
   if (basename.endsWith(".tfvars") || basename === "backend.hcl")
     return true;
-  if (basename.includes(".tfstate") || /^gha-creds-.*\.json$/.test(basename))
+  if (basename.includes(".tfstate") || GHA_CREDS_FILE_RE.test(basename))
     return true;
   if (normalized === "PLAN.md" || normalized === "comments.md")
     return true;
@@ -1907,6 +1955,13 @@ function isTemplatePathExcluded(relativePath) {
 }
 
 // src/editions.ts
+var NON_INDENTED_LINE_RE = /^\S/;
+var IMPORTER_KEY_LINE_RE = /^ {2}(\S[^:]*):\s*$/;
+var EXTRA_BLANK_LINES_RE = /\n{3,}/g;
+var START_TABLE_ROW_RE = /^\| `apps\/start` .*\n/gm;
+var START_PARAGRAPH_RE = /^`apps\/start`[\s\S]*?(?:\n\n|\n?(?![\s\S]))/gm;
+var WORKER_NAME_FIELD_RE = /("name":\s*")[^"]+(")/;
+var DATABASE_NAME_FIELD_RE = /("database_name":\s*")[^"]+(")/;
 var EDITION_NAMES = ["web", "mobile", "start"];
 var START_EDITION_PATHS = ["apps/start", ".github/workflows/deploy-start.yml"];
 var START_EDITION_OVERLAY = "apps/start/edition";
@@ -1916,6 +1971,7 @@ var START_ROOT_CONTRACTS = {
 };
 var START_ONLY_KEPT_PATHS = [
   "apps/start",
+  "apps/site",
   "packages/billing",
   "packages/tsconfig",
   ".github/workflows/deploy-start.yml",
@@ -1953,14 +2009,14 @@ function pruneLockfileImporters(content, removedImporters) {
   let inImporters = false;
   let skipping = false;
   for (const line of lines) {
-    if (/^\S/.test(line)) {
+    if (NON_INDENTED_LINE_RE.test(line)) {
       inImporters = line === "importers:";
       skipping = false;
       output.push(line);
       continue;
     }
     if (inImporters) {
-      const importer = line.match(/^ {2}(\S[^:]*):\s*$/)?.[1];
+      const importer = line.match(IMPORTER_KEY_LINE_RE)?.[1];
       if (importer !== undefined)
         skipping = removed.has(importer);
       if (skipping)
@@ -1969,7 +2025,7 @@ function pruneLockfileImporters(content, removedImporters) {
     output.push(line);
   }
   return output.join(`
-`).replace(/\n{3,}/g, `
+`).replace(EXTRA_BLANK_LINES_RE, `
 
 `);
 }
@@ -1984,10 +2040,10 @@ function stripKnipWorkspaces(content, removedWorkspaces) {
 `;
 }
 function stripStartReferences(content) {
-  return content.replace(/^\| `apps\/start` .*\n/gm, "").replace(/^`apps\/start`[\s\S]*?(?:\n\n|\n?(?![\s\S]))/gm, "");
+  return content.replace(START_TABLE_ROW_RE, "").replace(START_PARAGRAPH_RE, "");
 }
 function rewriteStartWorkerIdentifiers(content, appName) {
-  return content.replace(/("name":\s*")[^"]+(")/, `$1${appName}$2`).replace(/("database_name":\s*")[^"]+(")/, `$1${appName}$2`);
+  return content.replace(WORKER_NAME_FIELD_RE, `$1${appName}$2`).replace(DATABASE_NAME_FIELD_RE, `$1${appName}$2`);
 }
 function startOnlyRootPackage(rootPackage, overlayPackage) {
   const root = JSON.parse(rootPackage);
@@ -1997,12 +2053,13 @@ function startOnlyRootPackage(rootPackage, overlayPackage) {
 }
 
 // src/delivery.ts
+var WHITESPACE_CHAR_RE3 = /\s/;
 var RELEASE_TAG_PATTERN = /^v\d+\.\d+\.\d+(?:-rc\.\d+)?$/;
 function validateLicenseKey(value) {
   const key = value.trim();
   if (!key)
     return "Enter the licence key from your purchase receipt.";
-  if (/\s/.test(key))
+  if (WHITESPACE_CHAR_RE3.test(key))
     return "A licence key does not contain spaces.";
   if (!key.startsWith(LICENSE_KEY_PREFIX) || key.length === LICENSE_KEY_PREFIX.length) {
     return `A ${CLI_NAME2} licence key starts with ${LICENSE_KEY_PREFIX}. Copy it from your purchase receipt or the customer portal.`;
@@ -2588,6 +2645,8 @@ function isExecutable(path) {
 }
 
 // src/agent-setup.ts
+var CODEX_AGENT_DOCS_TABLE_RE = /^\[mcp_servers\.(?:agent-docs|agent_docs|"agent-docs")\]$/m;
+var LINE_BREAK_RE = /\r?\n/;
 var CLIENTS = ["codex", "claude", "cursor"];
 var SERVER_NAME = "agent-docs";
 var CODEX_START = "# agent-context:start";
@@ -2681,7 +2740,7 @@ function mergeCodexConfig(existing, root) {
 
 ${managed}${existing.slice(after)}`.trimStart();
   }
-  if (/^\[mcp_servers\.(?:agent-docs|agent_docs|"agent-docs")\]$/m.test(existing)) {
+  if (CODEX_AGENT_DOCS_TABLE_RE.test(existing)) {
     throw new Error("Codex already has an unmanaged agent-docs server; remove or rename it first.");
   }
   return `${existing.trimEnd()}${existing.trim() ? `
@@ -2732,14 +2791,14 @@ async function addGitInfoExcludes(root, paths) {
     return false;
   const excludePath = resolve(root, rawPath);
   const existing = await readFile(excludePath, "utf8").catch(() => "");
-  const missing = paths.filter((path) => !existing.split(/\r?\n/).includes(path));
+  const missing = paths.filter((path) => !existing.split(LINE_BREAK_RE).includes(path));
   if (missing.length === 0)
     return true;
   const prefix = existing && !existing.endsWith(`
 `) ? `
 ` : "";
   const marker = "# Local agent configuration";
-  const heading = existing.split(/\r?\n/).includes(marker) ? "" : `${marker}
+  const heading = existing.split(LINE_BREAK_RE).includes(marker) ? "" : `${marker}
 `;
   await atomicWrite(excludePath, `${existing}${prefix}${heading}${missing.join(`
 `)}
@@ -2889,6 +2948,9 @@ import { resolve as resolve2 } from "node:path";
 // src/deployment.ts
 import { mkdir as mkdir2, readFile as readFile2, rm, stat as stat2, writeFile as writeFile2 } from "node:fs/promises";
 import { join as join3 } from "node:path";
+var DEPLOYMENT_ENVIRONMENT_RE = /^[a-z][a-z0-9-]{1,30}$/;
+var REGION_RE = /^[a-z0-9][a-z0-9-]{1,31}$/;
+var DOMAIN_RE = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
 var deploymentClouds = ["aws", "gcp", "azure"];
 var frontendTargets = ["native", "vercel", "cloudflare"];
 var storageProviders = ["r2", "s3", "gcs"];
@@ -2933,19 +2995,19 @@ function parseStorageProvider(value) {
   return value;
 }
 function validateDeploymentEnvironment(value) {
-  if (!/^[a-z][a-z0-9-]{1,30}$/.test(value)) {
+  if (!DEPLOYMENT_ENVIRONMENT_RE.test(value)) {
     return "Environment must use 2-31 lowercase letters, numbers, or hyphens.";
   }
   return;
 }
 function validateRegion(value) {
-  if (!/^[a-z0-9][a-z0-9-]{1,31}$/.test(value)) {
+  if (!REGION_RE.test(value)) {
     return "Region must use 2-32 lowercase letters, numbers, or hyphens.";
   }
   return;
 }
 function validateDomain(value) {
-  if (value.length > 80 || !/^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(value)) {
+  if (value.length > 80 || !DOMAIN_RE.test(value)) {
     return "Enter a lowercase hostname such as api.example.com, without a protocol or path.";
   }
   return;
@@ -3409,6 +3471,9 @@ async function collectDeploymentSelection2(defaults = {}, nonInteractive = false
 // src/deployment.ts
 import { mkdir as mkdir3, readFile as readFile4, rm as rm2, stat as stat3, writeFile as writeFile3 } from "node:fs/promises";
 import { join as join5 } from "node:path";
+var DEPLOYMENT_ENVIRONMENT_RE2 = /^[a-z][a-z0-9-]{1,30}$/;
+var REGION_RE2 = /^[a-z0-9][a-z0-9-]{1,31}$/;
+var DOMAIN_RE2 = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
 var deploymentClouds2 = ["aws", "gcp", "azure"];
 var frontendTargets2 = ["native", "vercel", "cloudflare"];
 var storageProviders2 = ["r2", "s3", "gcs"];
@@ -3443,19 +3508,19 @@ function parseStorageProvider2(value) {
   return value;
 }
 function validateDeploymentEnvironment2(value) {
-  if (!/^[a-z][a-z0-9-]{1,30}$/.test(value)) {
+  if (!DEPLOYMENT_ENVIRONMENT_RE2.test(value)) {
     return "Environment must use 2-31 lowercase letters, numbers, or hyphens.";
   }
   return;
 }
 function validateRegion2(value) {
-  if (!/^[a-z0-9][a-z0-9-]{1,31}$/.test(value)) {
+  if (!REGION_RE2.test(value)) {
     return "Region must use 2-32 lowercase letters, numbers, or hyphens.";
   }
   return;
 }
 function validateDomain2(value) {
-  if (value.length > 80 || !/^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(value)) {
+  if (value.length > 80 || !DOMAIN_RE2.test(value)) {
     return "Enter a lowercase hostname such as api.example.com, without a protocol or path.";
   }
   return;
@@ -3632,12 +3697,13 @@ import { rm as rm3 } from "node:fs/promises";
 import { join as join6 } from "node:path";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
+var TRAILING_SLASHES_RE = /\/+$/;
 var RELEASE_TAG_PATTERN2 = /^v\d+\.\d+\.\d+(?:-rc\.\d+)?$/;
 var INDEX_TIMEOUT_MS = 15000;
 var DOWNLOAD_TIMEOUT_MS = 300000;
 function deliveryBaseUrl(environment = process.env) {
   const configured = environment[DELIVERY_URL_VARIABLE]?.trim();
-  return (configured || DELIVERY_BASE_URL).replace(/\/+$/, "");
+  return (configured || DELIVERY_BASE_URL).replace(TRAILING_SLASHES_RE, "");
 }
 function entitledEditions(index) {
   if (!Array.isArray(index.editions))
@@ -3756,6 +3822,7 @@ async function downloadAsset(licenseKey, releaseTag, assetName, directory, baseU
 }
 
 // src/scaffold.ts
+var SHA256_CHECKSUM_LINE_RE = /^([a-f0-9]{64})\s+\*?([^\s]+)$/i;
 var execFileAsync = promisify(execFile);
 async function assertEmptyTarget(targetDirectory) {
   try {
@@ -3825,7 +3892,7 @@ async function assertNoSymbolicLinks(directory, root = directory, isIncluded) {
   }
 }
 function verifyReleaseMetadata(checksum, manifest, artifactName, digest, templateRef) {
-  const checksumMatch = checksum.trim().match(/^([a-f0-9]{64})\s+\*?([^\s]+)$/i);
+  const checksumMatch = checksum.trim().match(SHA256_CHECKSUM_LINE_RE);
   if (!checksumMatch || checksumMatch[2] !== artifactName) {
     throw new Error(`${CLI_NAME2} release checksum metadata is malformed.`);
   }
@@ -4041,6 +4108,9 @@ async function assembleEditions(target, selection, { keepStartOverlay = false }
 async function applyStartIdentity(target, appName) {
   await rewriteIfPresent(join7(target, "apps/start/wrangler.jsonc"), (content) => rewriteStartWorkerIdentifiers(content, appName));
 }
+async function renameSiteWorker(target, appName) {
+  await rewriteIfPresent(join7(target, "apps/site/wrangler.jsonc"), (content) => rewriteSiteWorkerName(content, appName));
+}
 async function renameFrontendWorker(target, appName) {
   const workerPath = join7(target, "apps/web/wrangler.toml");
   if (!await stat4(workerPath).catch(() => {
@@ -4152,6 +4222,7 @@ async function scaffold(options) {
     const packagePath = join7(target, "package.json");
     const packageReplacements = await rewriteFile(packagePath, (content) => rewriteRootPackageName(content, options.appName));
     await renameFrontendWorker(target, options.appName);
+    await renameSiteWorker(target, options.appName);
     const scope = await applyScopeRewrite(target, options.scope);
     if (selection.web) {
       await neutralizeAgentInstructions(target);
@@ -4185,6 +4256,10 @@ async function scaffold(options) {
 }
 
 // src/cli.ts
+var COMBINING_MARK_RE = /\p{Mark}/gu;
+var NON_ALPHANUMERIC_RE = /[^a-z0-9]+/g;
+var OUTER_DASHES_RE = /^-+|-+$/g;
+
 class CliCancelled extends Error {
 }
 function usage() {
@@ -4334,7 +4409,7 @@ function suggestBrandName(appName) {
   return appName.split("-").map((segment) => productAcronyms[segment] ?? `${segment.charAt(0).toUpperCase()}${segment.slice(1)}`).join(" ");
 }
 function suggestScope(brandName, fallbackAppName) {
-  const namespace = brandName.normalize("NFKD").replace(/\p{Mark}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  const namespace = brandName.normalize("NFKD").replace(COMBINING_MARK_RE, "").toLowerCase().replace(NON_ALPHANUMERIC_RE, "-").replace(OUTER_DASHES_RE, "");
   return namespace || fallbackAppName;
 }
 async function unwrapPrompt(value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "superslate",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Create a production-oriented SaaS application from superslate.",
   "keywords": [
     "bun",